CERTA-2005-AVI-217
Vulnerability from certfr_avis - Published: 2005-06-15 - Updated: 2005-06-15
Une Vulnérabilité dans Microsoft Agent permet à un utilisateur mal intentionné d'usurper le contenu d'un site web.
Description
Microsoft Agent est un composant de Microsoft Windows destiné à personnaliser l'interface utilisateur. Une vulnérabilité permet à un utilisateur mal intentionné d'usurper le contenu d'un site. La victime croira donc parcourir un site de confiance alors qu'elle se trouve en réalité sur un site malicieusement construit par l'attaquant.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Microsoft | Windows | Microsoft Windows XP Professional x64 Edition ; | ||
| Microsoft | Windows | Microsoft Windows XP édition 64-Bit Version 2003 (pour Itanium) ; | ||
| Microsoft | Windows | Microsoft Windows XP édition 64-Bit Service Pack 1 (pour Itanium) ; | ||
| Microsoft | Windows | Microsoft Windows Server 2003 x64 Edition ; | ||
| Microsoft | Windows | Microsoft Windows XP Service Pack 1 et 2 ; | ||
| Microsoft | Windows | Microsoft Windows Server 2003 et Microsoft Windows Server 2003 Service Pack 1 ; | ||
| Microsoft | Windows | Microsoft Windows Server 2003 et Microsoft Windows Server 2003 Service Pack 1 pour systèmes Itanium ; | ||
| Microsoft | Windows | Microsoft Windows 98, Windows 98 Seconde Edition, Windows Millenium Edition. | ||
| Microsoft | Windows | Microsoft Windows 2000 Service Pack 3 et 4 ; |
References
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Microsoft Windows XP Professional x64 Edition ;",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Windows XP \u00e9dition 64-Bit Version 2003 (pour Itanium) ;",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Windows XP \u00e9dition 64-Bit Service Pack 1 (pour Itanium) ;",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Windows Server 2003 x64 Edition ;",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Windows XP Service Pack 1 et 2 ;",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Windows Server 2003 et Microsoft Windows Server 2003 Service Pack 1 ;",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Windows Server 2003 et Microsoft Windows Server 2003 Service Pack 1 pour syst\u00e8mes Itanium ;",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Windows 98, Windows 98 Seconde Edition, Windows Millenium Edition.",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Windows 2000 Service Pack 3 et 4 ;",
"product": {
"name": "Windows",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Description\n\nMicrosoft Agent est un composant de Microsoft Windows destin\u00e9 \u00e0\npersonnaliser l\u0027interface utilisateur. Une vuln\u00e9rabilit\u00e9 permet \u00e0 un\nutilisateur mal intentionn\u00e9 d\u0027usurper le contenu d\u0027un site. La victime\ncroira donc parcourir un site de confiance alors qu\u0027elle se trouve en\nr\u00e9alit\u00e9 sur un site malicieusement construit par l\u0027attaquant.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [],
"initial_release_date": "2005-06-15T00:00:00",
"last_revision_date": "2005-06-15T00:00:00",
"links": [
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft MS05-032 du 14 juin 2005 :",
"url": "http://www.microsoft.com/technet/security/bulletin/MS05-032.mspx"
}
],
"reference": "CERTA-2005-AVI-217",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2005-06-15T00:00:00.000000"
}
],
"risks": [
{
"description": "Usurpation de contenu de site web"
}
],
"summary": "Une Vuln\u00e9rabilit\u00e9 dans Microsoft Agent permet \u00e0 un utilisateur mal\nintentionn\u00e9 d\u0027usurper le contenu d\u0027un site web.\n",
"title": "Vuln\u00e9rabilit\u00e9 des syst\u00e8mes Microsoft Windows",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 MS05-032 du 14 juin 2005",
"url": null
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…