Buffer Overflow Vulnerability in Cisco Security Agent for Windows
CVE-2007-5580

Currently unrated

Key Information:

Vendor
Cisco
Status
Security Agent
Vendor
CVE Published:
15 December 2007

Summary

A buffer overflow vulnerability exists in the Cisco Security Agent for Windows, allowing remote attackers to execute arbitrary code. This issue arises when the agent improperly handles crafted SMB packets sent over TCP port 139 and 445. Attackers can exploit this vulnerability to gain unauthorized control over affected systems, making it essential to apply the latest patches and updates.

References

http://securityreason.com/securityalert/3425
third-party-advisoryx_refsource_SREASON
http://secunia.com/advisories/27947
third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2007/4103
vdb-entryx_refsource_VUPEN

EPSS Score

20% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.