Windows平台下的Cisco Security Agent SMB远程缓冲区溢出漏洞
Cisco Security Agent提供对服务器和桌面电脑系统的安全威胁保护。 Windows平台下的Cisco Security Agent在系统驱动中存在缓冲区溢出，远程攻击者可以利用漏洞进行内存破坏攻击，可能导致任意代码执行。 当处理特殊构建的TCP段到TCP 139或445端口时，Cisco Security Agent系统驱动处理SMB协议时可导致内核内存破坏，可能以系统进程权限执行任意指令。 Cisco Security Agent 5.1 .79 Cisco Security Agent 5.0 .193 Cisco Security Agent 4.5.1 .657 Cisco Security Agent 4.5.1 .639 Cisco Security Agent 4.5.1 Cisco Security Agent 4.5 Cisco Security Agent 4.0.3 .728 Cisco Security Agent 4.0.3 Cisco Security Agent 4.0.2 Cisco Security Agent 4.0.1 Cisco Security Agent 4.0 Cisco Security Agent 2.1 Cisco Security Agent 5.2 Cisco Security Agent 5.1 Cisco Security Agent 5.0.0.201 Cisco Security Agent 5.0 Cisco Security Agent 4.5.1.659 Cisco Security Agent 4.5.1.659 Cisco Security Agent 3.x 可参考如下安全公告获得补丁信息： <a href=http://www.cisco.com/warp/public/707/cisco-sa-20071205-csa.shtml target=_blank>http://www.cisco.com/warp/public/707/cisco-sa-20071205-csa.shtml</a>
