Vulnerability

CERT-In Vulnerability Note CIVN-2005-0055
Vulnerability in Microsoft Agent Could Allow Spoofing

Original Issue Date:June 15, 2005

Severity Rating: LOW

Overview

A spoofing vulnerability in Microsoft agent may allow a malicious attacker to spoof trusted internet content.

Impact

A malicious attacker may exploit this vulnerability by tricking users to download and install malicious software from an attacker's hosted malicious website.

Description

A spoofing vulnerability in Microsoft agent may allow remote malicious attacker to trick users to install malicious software. Successful exploitation of vulnerability requires persuading users to click malicious website link. The security prompt and other types of internet content may be spoofed disguising malicious website as trusted.

The impact of vulnerabity depends on privileges of users installing malicious content. If a user is logged with administrative privileges a remote attacker may take complete control of the affected system.

Workaround

Set Internet and Local intranet security zone settings to 'High' to disable running ActiveX controls in these zones.

Do not visit untrusted websites.

Solution

Apply the appropriate patches as mentioned in Microsoft Security Bulletin MS05-032

Vendor Information

Microsoft
http://www.microsoft.com/technet/security/bulletin/MS05-032.mspx

References

Secunia advisory
http://secunia.com/advisories/15689/

CVE Name
CAN-2005-1214

Disclaimer

The information provided herein is on "as is" basis, without warranty of any kind.

Contact Information

Email: info@cert-in.org.in
Phone: +91-11-2436857

Postal address

Indian Computer Emergency Response Team (CERT-In)
Ministry of Electronics and Information Technology
Government of India
Electronics Niketan
6, CGO Complex, Lodhi Road,
New Delhi - 110 003
India