CVE-2007-3040 - Secunia Advisories - Vulnerability Intelligence

CVE Reference: CVE-2007-3040
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2007-3040

Description: Stack-based buffer overflow in agentdpv.dll 2.0.0.3425 in Microsoft Agent on Windows 2000 SP4 allows remote attackers to execute arbitrary code via a crafted URL to the Agent (Agent.Control) ActiveX control, which triggers an overflow within the Agent Service (agentsrv.exe) process, a different issue than CVE-2007-1205.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/35752 ST 1018677 SREASON http://securityreason.com/securityalert/3124 SAID Secunia Advisory: SA26753 OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:2116 OSVDB 36934 MS http://www.microsoft.com/technet/security/Bulletin/MS07-051.mspx IDEFENSE http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=592 CERT-VN 716872 CERT http://www.us-cert.gov/cas/techalerts/TA07-254A.html BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/479096/100/0/threaded BID 25566

Return to the previous page.