MacroVision InstallShield Update Service isusweb.dll unsafe method

Added: 12/07/2007 CVE: CVE-2007-5660 BID: 26280 OSVDB: 38347 Background MacroVision InstallShield is software for creating installers or software packages. Problem Several unsafe methods in the Update Service ActiveX control allow command execution when a user loads a specially crafted web page...

CVE-2007-5660

CVE-2007-5660 affects Macrovision InstallShield Update Service ActiveX (Isusweb.dll). The connected sources describe a stack/remote buffer overflow in Isusweb.dll (Isusweb.dll 6.0.100.54472) exploited by passing an overly long ProductCode string to the DownloadAndExecute method, enabling arbitrar...

CVE-2007-5660: Undefined Security Weakness

Unspecified vulnerability in the Update Service ActiveX control in isusweb.dll before 6.0.100.65101 in MacroVision FLEXnet Connect and InstallShield 2008 allows remote attackers to execute arbitrary code via an unspecified "unsafe method," possibly involving a buffer overflow...

FLEXnet Connect Update Service ActiveX Control Multiple Code Execution Vulnerabilities

Macrovision FLEXnet Connect, formerly known as InstallShield Update Service, is installed on the remote host. It is a software management solution for internally-developed and third-party applications, and may have been installed as part of the FLEXnet Connect SDK, other InstallShield software, o...

CVE-2007-2419

CVE-2007-2419: A buffer overflow in the boisweb.dll ActiveX control used by Macrovision FLEXnet Connect 6.0 and Update Service 3.x–5.x allows remote code execution. The vulnerability is triggered by specific parameters to DownloadAndExecute (second parameter) and AddFileEx (third parameter). Tipp...

TPTI-07-09: Macrovision FLEXnet boisweb.dll ActiveX Control Buffer Overflow Vulnerability

TPTI-07-09: Macrovision FLEXnet boisweb.dll ActiveX Control Buffer Overflow Vulnerability http://dvlabs.tippingpoint.com/advisory/TPTI-07-09 June 4, 2007 -- CVE ID: CVE-2007-2419 -- Affected Vendor: Macrovision -- Affected Products: Update Service 3.x Update Service 4.x Update Service 5.x FLEXnet...

Security feature bypass

The DWUpdateService ActiveX control in the agent agent.exe in Macrovision FLEXnet Connect 6.0 and Update Service 3.x to 5.x allows remote attackers to execute arbitrary commands via 1 the Execute method, and obtain the exit status using 2 the GetExitCode method...

CVE-2007-0328

The DWUpdateService ActiveX control in the agent agent.exe in Macrovision FLEXnet Connect 6.0 and Update Service 3.x to 5.x allows remote attackers to execute arbitrary commands via 1 the Execute method, and obtain the exit status using 2 the GetExitCode method...

CVE-2007-0321

Buffer overflow in the Update Service Agent ActiveX Control in isusweb.dll for Macrovision FLEXnet Connect formerly InstallShield Update Service allows remote attackers to execute arbitrary code via the Download method...

CVE-2007-0321

CVE-2007-0321 affects Macrovision FLEXnet Connect (InstallShield Update Service) via the Update Service Agent ActiveX control isusweb.dll. The vulnerability is a buffer overflow in the Download method that could allow remote attackers to execute arbitrary code on the affected host. The descriptio...

CVE-2007-0321: Undefined Security Weakness

Buffer overflow in the Update Service Agent ActiveX Control in isusweb.dll for Macrovision FLEXnet Connect formerly InstallShield Update Service allows remote attackers to execute arbitrary code via the Download method...

Macrovision FLEXnet Connect / InstallShield Update Service Agent ActiveX buffer overflows

Overview The Macrovision / InstallShield Update Service Web Agent ActiveX control contains buffer overflows, which could allow an attacker to execute arbitrary code on a vulnerable system. Description The InstallShield Update Service, now known as Macrovision FLEXnet Connect, contains an ActiveX...