CVE-2007-1205 Unspecified vulnerability in Microsoft Agent (msagent\agentsvr.exe) in Windows 2000 SP4, XP SP2, and Server 2003, 2003 SP1, and 2003 SP2 allows remote attackers to execute arbitrary code via crafted U...
HighCVSS 9.3
EPSS 31.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in Microsoft Agent (msagent\agentsvr.exe) in Windows 2000 SP4, XP SP2, and Server 2003, 2003 SP1, and 2003 SP2 allows remote attackers to execute arbitrary code via crafted URLs, which result in memory corruption.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows 2000 | All versions | No fix listed |
| Microsoft windows 2003 server | = gold | No fix listed |
| Microsoft windows 2003 server | = sp1 | No fix listed |
| Microsoft windows 2003 server | = sp2 | No fix listed |
| Microsoft windows xp | All versions | No fix listed |
References
- 22896 third-party-advisory
- secunia.com
- VU#728057 third-party-advisory us-government-resource
- 20070410 Secunia Research: Microsoft Agent URL Parsing Memory CorruptionVulnerability mailing-list
- HPSBST02208 vendor-advisory
- 23337 vdb-entry
- 1017896 vdb-entry
- TA07-100A third-party-advisory us-government-resource
- ADV-2007-1324 vdb-entry
- MS07-020 vendor-advisory
- oval:org.mitre.oval:def:2034 signature vdb-entry