CERTA-2005-AVI-217
Vulnerability from certfr_avis

Une Vulnérabilité dans Microsoft Agent permet à un utilisateur mal intentionné d'usurper le contenu d'un site web.

Description

Microsoft Agent est un composant de Microsoft Windows destiné à personnaliser l'interface utilisateur. Une vulnérabilité permet à un utilisateur mal intentionné d'usurper le contenu d'un site. La victime croira donc parcourir un site de confiance alors qu'elle se trouve en réalité sur un site malicieusement construit par l'attaquant.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None
Impacted products
Vendor Product Description
Microsoft Windows Microsoft Windows XP Professional x64 Edition ;
Microsoft Windows Microsoft Windows XP édition 64-Bit Version 2003 (pour Itanium) ;
Microsoft Windows Microsoft Windows XP édition 64-Bit Service Pack 1 (pour Itanium) ;
Microsoft Windows Microsoft Windows Server 2003 x64 Edition ;
Microsoft Windows Microsoft Windows XP Service Pack 1 et 2 ;
Microsoft Windows Microsoft Windows Server 2003 et Microsoft Windows Server 2003 Service Pack 1 ;
Microsoft Windows Microsoft Windows Server 2003 et Microsoft Windows Server 2003 Service Pack 1 pour systèmes Itanium ;
Microsoft Windows Microsoft Windows 98, Windows 98 Seconde Edition, Windows Millenium Edition.
Microsoft Windows Microsoft Windows 2000 Service Pack 3 et 4 ;
References

Show details on source website


{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Microsoft Windows XP Professional x64 Edition ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Windows XP \u00e9dition 64-Bit Version 2003 (pour Itanium) ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Windows XP \u00e9dition 64-Bit Service Pack 1 (pour Itanium) ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Windows Server 2003 x64 Edition ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Windows XP Service Pack 1 et 2 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Windows Server 2003 et Microsoft Windows Server 2003 Service Pack 1 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Windows Server 2003 et Microsoft Windows Server 2003 Service Pack 1 pour syst\u00e8mes Itanium ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Windows 98, Windows 98 Seconde Edition, Windows Millenium Edition.",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Windows 2000 Service Pack 3 et 4 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nMicrosoft Agent est un composant de Microsoft Windows destin\u00e9 \u00e0\npersonnaliser l\u0027interface utilisateur. Une vuln\u00e9rabilit\u00e9 permet \u00e0 un\nutilisateur mal intentionn\u00e9 d\u0027usurper le contenu d\u0027un site. La victime\ncroira donc parcourir un site de confiance alors qu\u0027elle se trouve en\nr\u00e9alit\u00e9 sur un site malicieusement construit par l\u0027attaquant.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [],
  "initial_release_date": "2005-06-15T00:00:00",
  "last_revision_date": "2005-06-15T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft MS05-032 du 14 juin 2005 :",
      "url": "http://www.microsoft.com/technet/security/bulletin/MS05-032.mspx"
    }
  ],
  "reference": "CERTA-2005-AVI-217",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2005-06-15T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Usurpation de contenu de site web"
    }
  ],
  "summary": "Une Vuln\u00e9rabilit\u00e9 dans Microsoft Agent permet \u00e0 un utilisateur mal\nintentionn\u00e9 d\u0027usurper le contenu d\u0027un site web.\n",
  "title": "Vuln\u00e9rabilit\u00e9 des syst\u00e8mes Microsoft Windows",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 MS05-032 du 14 juin 2005",
      "url": null
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.


Loading…

Loading…