Lucene search

[email protected]CVE-2005-1214

HistoryJun 14, 2005 - 4:00 a.m.

CVE-2005-1214

2005-06-1404:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2005-1214

microsoft agent

remote attackers

spoofing

trusted internet content

arbitrary code

security prompts

malicious web page

nvd

7.7 High

AI Score

Confidence

Low

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.138 Low

EPSS

Percentile

95.6%

JSON

Microsoft Agent allows remote attackers to spoof trusted Internet content and execute arbitrary code by disguising security prompts on a malicious Web page.

CPENameOperatorVersion
microsoft:windows_2003_servermicrosoft windows 2003 servereq64-bit
microsoft:windows_2000_terminal_servicesmicrosoft windows 2000 terminal serviceseq*
microsoft:windows_2003_servermicrosoft windows 2003 servereqweb
microsoft:windows_xpmicrosoft windows xpeq*
microsoft:windows_2003_servermicrosoft windows 2003 servereqenterprise
microsoft:windows_2003_servermicrosoft windows 2003 servereqenterprise_64-bit
microsoft:windows_2000microsoft windows 2000eq*
microsoft:windows_memicrosoft windows meeq*
microsoft:windows_2003_servermicrosoft windows 2003 servereqstandard_64-bit
microsoft:windows_2003_servermicrosoft windows 2003 servereqdatacenter_64-bit

CPE	Name	Operator	Version
microsoft:windows_2003_server	microsoft windows 2003 server	eq	64-bit
microsoft:windows_2000_terminal_services	microsoft windows 2000 terminal services	eq	*
microsoft:windows_2003_server	microsoft windows 2003 server	eq	web
microsoft:windows_xp	microsoft windows xp	eq	*
microsoft:windows_2003_server	microsoft windows 2003 server	eq	enterprise
microsoft:windows_2003_server	microsoft windows 2003 server	eq	enterprise_64-bit
microsoft:windows_2000	microsoft windows 2000	eq	*
microsoft:windows_me	microsoft windows me	eq	*
microsoft:windows_2003_server	microsoft windows 2003 server	eq	standard_64-bit
microsoft:windows_2003_server	microsoft windows 2003 server	eq	datacenter_64-bit

Rows per page:

1-10 of 141

References

secunia.com/advisories/15689

www.securityfocus.com/bid/13948

docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-032

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1194

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A682

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A906

7.7 High

AI Score

Confidence

Low

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.138 Low

EPSS

Percentile

95.6%

JSON

Related for CVE-2005-1214

nessus1 securityvulns1 cert1