CVE-2007-0320 Multiple buffer overflows in (a) an ActiveX control (iftw.dll) and (b) Netscape plug-in (npiftw32.dll) for Macrovision (formerly InstallShield) InstallFromTheWeb allow remote attackers to execute arbi...
HighCVSS 9.3
EPSS 5.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple buffer overflows in (a) an ActiveX control (iftw.dll) and (b) Netscape plug-in (npiftw32.dll) for Macrovision (formerly InstallShield) InstallFromTheWeb allow remote attackers to execute arbitrary code via crafted HTML documents.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| macrovision installfromtheweb | All versions | No fix listed |
References
- 33530 vdb-entry
- 33531 vdb-entry
- 24285 third-party-advisory vendor-advisory
- VU#181041 third-party-advisory us-government-resource
- www.kb.cert.org
- 22672 vdb-entry
- ADV-2007-0705 vdb-entry
- macrovision-installfromtheweb-activex-bo(32645) vdb-entry