iDefense Security Advisory 09.11.07 – Remote exploitation of a stack based buffer overflow vulnerability in Microsoft Corp’s Microsoft Windows 2000 Agent service could allow an attacker to execute arbitrary code with the privileges of the logged in user. The vulnerability exists within the Agent Service (agentsvr.exe). Due to improper handling of specially crafted URLs, an attack can cause stack based buffer overflow. iDefense has confirmed the existence of this vulnerability in the Agent service included in Windows 2000. Microsoft reports that newer versions of the Agent service are not vulnerable.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/59244/09.11.07-1.txt
Source: https://packetstormsecurity.com/files/59244/iDEFENSE-Security-Advisory-2007-09-11.1.html