| Definition Id: oval:org.mitre.oval:def:682 |
Date: 2006-11-17 |
| Title: |
Microsoft Agent Security Prompt Spoofing Vulnerability (Windows 2000) |
| Description: |
Microsoft Agent allows remote attackers to spoof trusted Internet content and execute arbitrary code by disguising security prompts on a malicious Web page. |
| Version: |
2 |
Class: |
vulnerability |
| Status: |
ACCEPTED |
Reference(s): |
CVE-2005-1214
|
| Family: |
windows |
| Platform(s): |
Microsoft Windows 2000 |
Product(s): |
Microsoft Agent |
| Definition Synopsis: |
- Software section
- AND Configuration section
- ActiveX controls and active scripting are enabled
- current user settings are being used and ActiveX controls and active scripting are enabled
- OR local machine settings are being used and ActiveX controls and active scripting are enabled
|
