CVE-2007-5660 Unspecified vulnerability in the Update Service ActiveX control in isusweb.dll before 6.0.100.65101 in MacroVision FLEXnet Connect and InstallShield 2008 allows remote attackers to execute arbitrary c...
HighCVSS 9.3
EPSS 36.6%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Unspecified vulnerability in the Update Service ActiveX control in isusweb.dll before 6.0.100.65101 in MacroVision FLEXnet Connect and InstallShield 2008 allows remote attackers to execute arbitrary code via an unspecified "unsafe method," possibly involving a buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| macrovision flexnet connect | All versions | No fix listed |
| macrovision installshield 2008 | All versions | No fix listed |
| macrovision update service | = 3.0 | No fix listed |
| macrovision update service | = 4.0 | No fix listed |
| macrovision update service | = 5.0 | No fix listed |
| macrovision update service | = 5.1.100_47363 | No fix listed |
| macrovision update service | = 6.0.100_60146 | No fix listed |
References
- 20071031 Macrovision InstallShield Update Service ActiveX Unsafe Method Vulnerability third-party-advisory
- 38347 vdb-entry
- 27475 patch third-party-advisory vendor-advisory
- support.installshield.com patch
- support.installshield.com patch
- www.macrovision.com patch
- 26280 patch vdb-entry
- 1018881 vdb-entry
- ADV-2007-3670 vdb-entry
- macrovision-isusweb-code-execution(38210) vdb-entry