CVE-2007-5660

2007-11-0216:46:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2007-5660

update service

activex control

remote code execution

buffer overflow

macrovision flexnet connect

installshield 2008

nvd

7.6 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.96 High

EPSS

Percentile

99.5%

JSON

Unspecified vulnerability in the Update Service ActiveX control in isusweb.dll before 6.0.100.65101 in MacroVision FLEXnet Connect and InstallShield 2008 allows remote attackers to execute arbitrary code via an unspecified “unsafe method,” possibly involving a buffer overflow.

CPENameOperatorVersion
macrovision:update_servicemacrovision update serviceeq3.0
macrovision:flexnet_connectmacrovision flexnet connecteq*
macrovision:installshield_2008macrovision installshield 2008eq*
macrovision:update_servicemacrovision update serviceeq6.0.100_60146
macrovision:update_servicemacrovision update serviceeq5.0
macrovision:update_servicemacrovision update serviceeq5.1.100_47363
macrovision:update_servicemacrovision update serviceeq4.0

CPE	Name	Operator	Version
macrovision:update_service	macrovision update service	eq	3.0
macrovision:flexnet_connect	macrovision flexnet connect	eq	*
macrovision:installshield_2008	macrovision installshield 2008	eq	*
macrovision:update_service	macrovision update service	eq	6.0.100_60146
macrovision:update_service	macrovision update service	eq	5.0
macrovision:update_service	macrovision update service	eq	5.1.100_47363
macrovision:update_service	macrovision update service	eq	4.0