CVE-2007-3040 Stack-based buffer overflow in agentdpv.dll 2.0.0.3425 in Microsoft Agent on Windows 2000 SP4 allows remote attackers to execute arbitrary code via a crafted URL to the Agent (Agent.Control) ActiveX c...
HighCVSS 9.3
EPSS 54.4%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in agentdpv.dll 2.0.0.3425 in Microsoft Agent on Windows 2000 SP4 allows remote attackers to execute arbitrary code via a crafted URL to the Agent (Agent.Control) ActiveX control, which triggers an overflow within the Agent Service (agentsrv.exe) process, a different issue than CVE-2007-1205.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows 2000 | All versions | No fix listed |
References
- 20070911 Microsoft Windows 2000 Agent URL Canonicalizing Stack Based Buffer Overflow Vulnerability third-party-advisory
- 26753 patch third-party-advisory vendor-advisory
- 3124 third-party-advisory
- 1018677 vdb-entry
- VU#716872 third-party-advisory us-government-resource
- 36934 vdb-entry
- 20070911 Assurent VR - Microsoft Agent Crafted URL Stack Buffer Overflow mailing-list
- 25566 vdb-entry
- TA07-254A third-party-advisory us-government-resource
- ADV-2007-3113 vdb-entry vendor-advisory
- MS07-051 vendor-advisory
- ms-agent-url-code-execution(35752) vdb-entry
- oval:org.mitre.oval:def:2116 signature vdb-entry