Lucene search
HistorySep 18, 2008 - 6:00 p.m.
CVE-2008-2470
cve-2008-2470
installshield
update service agent
activex
memory corruption
browser crash
denial of service
remote attackers
execute arbitrary code
7.8 High
AI Score
Confidence
High
9.3 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.746 High
EPSS
Percentile
98.1%
The InstallShield Update Service Agent ActiveX control in isusweb.dll allows remote attackers to cause a denial of service (memory corruption and browser crash) and possibly execute arbitrary code via a call to ExecuteRemote with a URL that results in a 404 error response.
Affected configurations
Node
macrovisionflexnet_connectMatch6.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| macrovision:flexnet_connect | macrovision flexnet connect | eq | 6.0 |
Related
checkpoint_advisories
checkpoint_advisories
prion
prion
Memory corruption
2008-09-18 18:00:00
nvd
nvd
CVE-2008-2470
2008-09-18 18:00:00
cert
cert
InstallShield Update Service Agent ActiveX control memory corruption
2008-09-18 00:00:00
cvelist
cvelist
CVE-2008-2470
2008-09-18 18:00:00
7.8 High
AI Score
Confidence
High
9.3 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.746 High
EPSS
Percentile
98.1%
Related for CVE-2008-2470