CVE-2007-1205

Sažetak

Unspecified vulnerability in Microsoft Agent (msagent\agentsvr.exe) in Windows 2000 SP4, XP SP2, and Server 2003, 2003 SP1, and 2003 SP2 allows remote attackers to execute arbitrary code via crafted URLs, which result in memory corruption.

Reference

http://secunia.com/advisories/22896
http://secunia.com/secunia_research/2006-74/advisory/
http://www.kb.cert.org/vuls/id/728057
http://www.securityfocus.com/archive/1/465235/100/0/threaded
http://www.securityfocus.com/archive/1/466331/100/200/threaded
http://www.securityfocus.com/bid/23337
http://www.securitytracker.com/id?1017896
http://www.us-cert.gov/cas/techalerts/TA07-100A.html
http://www.vupen.com/english/advisories/2007/1324
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-020
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2034

CVSS

Base:	9.3
Impact:	10.0
Exploitability:	8.6

Pristup

Vektor	Složenost	Autentikacija
NETWORK	MEDIUM	NONE

Impact

Povjerljivost	Cjelovitost	Dostupnost
COMPLETE	COMPLETE	COMPLETE

CVSS vektor

AV:N/AC:M/Au:N/C:C/I:C/A:C

Zadnje važnije ažuriranje

16-10-2018 - 16:37

Objavljeno

10-04-2007 - 21:19