Immunity Canvas: MS07_051

Name| ms07051 ---|--- CVE| CVE-2007-3040 Exploit Pack| CANVAS Description| Microsoft Agent URL Overflow Notes| CVE Name: CVE-2007-3040 VENDOR: Microsoft MSADV: MS07-051 VersionsAffected: Repeatability: References: http://www.microsoft.com/technet/security/Bulletin/ms07-051.mspx CVE Url:...

CVE-2007-3040

This CVE affects Microsoft Agent on Windows 2000 SP4, via the Agent (Agent.Control) ActiveX in agentdpv.dll 2.0.0.3425. A crafted URL can trigger a stack-based overflow in the Agent Service (agentsrv.exe), allowing remote code execution with the caller’s privileges. The issue is tied to the Micro...

Microsoft Agent agentdpv.dll ActiveX控件畸形URL栈溢出漏洞（MS07-051）

BUGTRAQ ID: 25566 CVECAN ID: CVE-2007-3040 Microsoft Windows是微软发布的非常流行的操作系统。 Windows操作系统所安装的Microsoft Agent ActiveX控件用于使用动画字符引导用户了解如何使用计算机，该ActiveX控件注册如下： 文件：agentdpv.dll ProgID：Agent.Control CLASSID：D45FD31B-5C6E-11D1-9EC1-00C04FD7081F Microsoft...

iDefense Security Advisory 09.11.07: Microsoft Windows 2000 Agent URL Canonicalizing Stack Based Buffer Overflow Vulnerability

Microsoft Windows 2000 Agent URL Canonicalizing Stack Based Buffer Overflow Vulnerability iDefense Security Advisory 09.11.07 http://labs.idefense.com/intelligence/vulnerabilities/ Sep 11, 2007 I. BACKGROUND Microsoft Agent allows websites and programs to display animated characters that speak an...

Assurent VR - Microsoft Agent Crafted URL Stack Buffer Overflow

Microsoft Agent Crafted URL Stack Buffer Overflow Assurent ID: FSC20070911-11 1. Affected Software Microsoft Agent, version 2.0.0.3425 bundled with Windows 2000 Service Pack 4 Reference: http://www.microsoft.com/msagent/ 2. Vulnerability Summary The Microsoft Agent ActiveX control contains a buff...

Microsoft Agent crafted URL vulnerability

Added: 09/11/2007 CVE: CVE-2007-3040 BID: 25566 OSVDB: 36934 Background Microsoft Agent is a component of the Windows operating system designed to make using a computer easier through enriched user interaction. Problem A vulnerability in Microsoft Agent allows command execution when a user loads ...

MS07-051: Vulnerability in Microsoft Agent Could Allow Remote Code Execution (938827)

The remote version of Windows contains a flaw in the Microsoft Agent service that may allow an attacker to execute code on the remote host. To exploit this flaw, an attacker would need to set up a rogue website and lure a victim on the remote host into visiting it. C Tenable Network Security, Inc...