CVE-2007-6744 Flexera Macrovision InstallShield before 2008 sends a digital-signature password to an unintended application during certain signature operations involving .spc and .pvk files, which might allow local...
LowCVSS 2.1
EPSS 0.30%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Flexera Macrovision InstallShield before 2008 sends a digital-signature password to an unintended application during certain signature operations involving .spc and .pvk files, which might allow local users to obtain sensitive information via unspecified vectors, related to an incorrect interaction between InstallShield and Signcode.exe.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| flexerasoftware installshield | <= 1.0 | No fix listed |
| flexerasoftware installshield | <= 2.0 | No fix listed |
| flexerasoftware installshield | <= 3.0 | No fix listed |
| flexerasoftware installshield | <= 12 | No fix listed |
| flexerasoftware installshield | = 10.5 | No fix listed |
| flexerasoftware installshield | = 11 | No fix listed |
| flexerasoftware installshield | = 11.5 | No fix listed |