HTTP: Microsoft Agent Spoofing

This signature detects attempts to exploit a spoofing vulnerability that exists in the affected products, which could enable an attacker to spoof trusted Internet content. Users can believe they are accessing trusted Internet content when in reality, they are accessing malicious Internet content; for example, a malicious Web site. However, an attacker first has to persuade a user to visit the attacker's site in order to exploit this vulnerability.

Extended Description

Microsoft Agent is prone to a vulnerability that could allow a malicious website to spoof trusted content. This could result in a user downloading and executing malicious files thinking they are safe.

Affected Products

Microsoft windows_xp_media_center_edition

References

BugTraq: 13948

CVE: CVE-2005-1214

URL: http://www.microsoft.com/technet/security/bulletin/ms05-032.mspx http://oval.mitre.org/oval/definitions/data/oval1194.html

Short Name

HTTP:STC:MSA-SPOOF

Severity

Minor

Recommended

False

Recommended Action

None

HTTP: Microsoft Agent Spoofing

Extended Description

Affected Products

References

Found a potential security threat?