CVE-2007-0328 The DWUpdateService ActiveX control in the agent (agent.exe) in Macrovision FLEXnet Connect 6.0 and Update Service 3.x to 5.x allows remote attackers to execute arbitrary commands via (1) the Execute....
HighCVSS 9.3
EPSS 5.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The DWUpdateService ActiveX control in the agent (agent.exe) in Macrovision FLEXnet Connect 6.0 and Update Service 3.x to 5.x allows remote attackers to execute arbitrary commands via (1) the Execute method, and obtain the exit status using (2) the GetExitCode method.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| macrovision flexnet connect | = 6.0 | No fix listed |
| macrovision update service | = 3.0 | No fix listed |
| macrovision update service | = 4.0 | No fix listed |
| macrovision update service | = 5.0 | No fix listed |
References
- 36896 vdb-entry
- 25501 third-party-advisory vendor-advisory
- 32842 third-party-advisory vendor-advisory
- support.installshield.com patch
- www.blackberry.com
- VU#524681 patch third-party-advisory us-government-resource
- ADV-2007-2017 vdb-entry vendor-advisory
- ADV-2008-3278 vdb-entry vendor-advisory
- macrovision-dwupdate-command-execution(34660) vdb-entry