CVE-2008-2470 The InstallShield Update Service Agent ActiveX control in isusweb.dll allows remote attackers to cause a denial of service (memory corruption and browser crash) and possibly execute arbitrary code via...
HighCVSS 9.3
EPSS 5.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The InstallShield Update Service Agent ActiveX control in isusweb.dll allows remote attackers to cause a denial of service (memory corruption and browser crash) and possibly execute arbitrary code via a call to ExecuteRemote with a URL that results in a 404 error response.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| macrovision flexnet connect | = 6.0 | No fix listed |
References
- support.installshield.com patch
- VU#630017 third-party-advisory us-government-resource
- 31235 third-party-advisory vdb-entry
- ADV-2008-2625 permissions-required third-party-advisory vdb-entry
- installshield-updateservice-bo(45248) vdb-entry