Lucene search
HistoryFeb 23, 2007 - 3:28 a.m.
CVE-2007-0320
cve
2007
0320
buffer overflows
activex
netscape plug-in
iftw.dll
npiftw32.dll
macrovision
installfromtheweb
remote code execution
html documents
7.9 High
AI Score
Confidence
Low
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.113 Low
EPSS
Percentile
95.1%
Multiple buffer overflows in (a) an ActiveX control (iftw.dll) and (b) Netscape plug-in (npiftw32.dll) for Macrovision (formerly InstallShield) InstallFromTheWeb allow remote attackers to execute arbitrary code via crafted HTML documents.
| CPE | Name | Operator | Version |
|---|---|---|---|
| macrovision:installfromtheweb | macrovision installfromtheweb | eq | * |
Related
nessus
nessus
InstallShield InstallFromTheWeb ActiveX Control Multiple Overflows
2007-02-23 00:00:00
cert
cert
Macrovision / InstallShield InstallFromTheWeb buffer overflows
2007-02-22 00:00:00
prion
prion
Buffer overflow
2007-02-23 03:28:00
securityvulns
securityvulns
InstallShield multiple security vulnerabilities
2007-03-01 00:00:00
7.9 High
AI Score
Confidence
Low
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.113 Low
EPSS
Percentile
95.1%
Related for CVE-2007-0320