Vulnerability Note VU#718542

Microsoft Agent vulnerable to trusted site spoofing

A flaw in Microsoft Agent allows security prompts to be disguised by a Microsoft Agent character. As a result, users could be led to believe that they are accessing trusted Internet content when, in fact, they are accessing malicious Internet content. The user could subsequently be convinced to unintentionally allow the installation of malicious software. A remote attacker with the ability to craft a malicious web page and persuade or trick a user into visiting it could exploit this vulnerability.

II. Impact

Microsoft has published Microsoft Security Bulletin MS05-032 in response to this issue. Users are encouraged to review the bulletin and apply the patches it refers to.

Workarounds

In addition to the patches referenced above, Microsoft Security Bulletin MS05-032 also contains workaround information to mitigate this issue. Users, particularly those who are unable to apply the patches, should consider implementing these workarounds as appropriate.

Systems Affected

http://www.microsoft.com/technet/security/bulletin/MS05-032.mspx
http://www.ciac.org/ciac/bulletins/p-229.shtml
http://secunia.com/advisories/15689/

Credit

Thanks to Microsoft for reporting this vulnerability. Microsoft, in turn, credits Michael Krax with discovering and reporting this issue to them.

This document was written by Chad Dougherty based on information provided by Microsoft.

Other Information

If you have feedback, comments, or additional information about this vulnerability, please send us email.