CVE-2011-3174

The CVE-2011-3174 issue affects Novell ZENworks Configuration Management (AdminStudio) via the ISGrid2.dll/InstallShield ISGrid2 ActiveX control. A buffer overflow in DoFindReplace triggered by a long bstrReplaceText parameter allows remote code execution. Reported in versions 10.2, 10.3, and 11 ...

Flexera InstallShield DoFindReplace Multiple Heap Buffer Overflows (CVE-2011-3174)

Multiple heap buffer overflow vulnerabilities have been reported in Flexera Software InstallShield...

CVE-2007-6744

Flexera Macrovision InstallShield before 2008 sends a digital-signature password to an unintended application during certain signature operations involving .spc and .pvk files, which might allow local users to obtain sensitive information via unspecified vectors, related to an incorrect interacti...

Design/Logic Flaw

Flexera Macrovision InstallShield before 2008 sends a digital-signature password to an unintended application during certain signature operations involving .spc and .pvk files, which might allow local users to obtain sensitive information via unspecified vectors, related to an incorrect interacti...

CVE-2007-6744

Flexera Macrovision InstallShield before 2008 sends a digital-signature password to an unintended application during certain signature operations involving .spc and .pvk files, which might allow local users to obtain sensitive information via unspecified vectors, related to an incorrect interacti...

CVE-2007-6744

CVE-2007-6744 affects Flexera Macrovision InstallShield prior to 2008. The issue arises during certain code-signing operations with .spc and .pvk files, where a digital-signature password is sent to an unintended application due to an incorrect interaction between InstallShield and Signcode.exe. ...

CVE-2007-6744: Exposure of Sensitive Information to an Unauthorized Actor

Flexera Macrovision InstallShield before 2008 sends a digital-signature password to an unintended application during certain signature operations involving .spc and .pvk files, which might allow local users to obtain sensitive information via unspecified vectors, related to an incorrect interacti...

Novell ZENWorks Software Packaging ISGrid.Grid2.1 DoFindReplace bstrReplaceText Parameter Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell ZENWorks. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within \Program...

Realtek (InstallShield-RTCOMDLL.dll) Remote BOF Exploit

Exploit for windows platform in category remote exploits ======================================================= Realtek InstallShield-RTCOMDLL.dll Remote BOF Exploit ======================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0...

Macrovision Installshield Update Service - ActiveX Unsafe Method (Metasploit)

$Id: macrovisionunsafe.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Macrovision Installshield Update Service - Remote Buffer Overflow (Metasploit)

$Id: macrovisiondownloadandexecute.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Macrovision InstallShield Update Service isusweb.dll Remote Buffer Overflow (CVE-2007-6654)

Macrovision InstallShield line of products provides solution to software publishers and developers for electronically packaging, distributing, and updating their applications. More specifically, InstallShield is a software tool for creating installers or software packages. A buffer overflow...

Macrovision InstallShield Update Service ActiveX Unsafe Method

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Macrovision...

Macrovision InstallShield Update Service Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Macrovision...

Installshield 2009 15.0.0.53 Premier - ISWiAutomation15.dll ActiveX Arbitrary File Overwrite

Installshield 2009 15.0.0.53 Premier - ISWiAutomation15.dll ActiveX Arbitrary File Overwrite source: https://www.securityfocus.com/bid/43857/info InstallShield 2009 Premier ActiveX control is prone to an arbitrary-file-overwrite vulnerability. Attackers can overwrite arbitrary files on the victim...

Installshield 2009 15.0.0.53 Premier - 'ISWiAutomation15.dll' ActiveX Arbitrary File Overwrite

source: https://www.securityfocus.com/bid/43857/info InstallShield 2009 Premier ActiveX control is prone to an arbitrary-file-overwrite vulnerability. Attackers can overwrite arbitrary files on the victim's computer in the context of the vulnerable application typically Internet Explorer using th...

Installshield 2009 File Overwrite

""""""""""""""""""""""""""""""""""""""""""""""""""""""""""" """ :::::: :: :: :: :: :: :::: """ """ :: :: :: :: :::::: .. :::: :: """ """ ::::: ::: ::::: :: :: :: :: :: :::: """ """ :: :: :: :: : :: :: :: :: :: :: """ """ :::::: :: :: ::::: :: :::::: :: :: :::: rs.ir """ """ :: """ """ """...

Macrovision InstallShield Update Service Agent ActiveX Memory Corruption (CVE-2008-2470)

Macrovision InstallShield is a software tool for creating installers or software packages. A memory corruption vulnerability has been reported in Macrovision InstallShield Update Service. The vulnerability is due to a design error in the Macrovision InstallShield Update Service while processing...

CVE-2008-2470

The InstallShield Update Service Agent ActiveX control in isusweb.dll allows remote attackers to cause a denial of service memory corruption and browser crash and possibly execute arbitrary code via a call to ExecuteRemote with a URL that results in a 404 error response...

CVE-2008-2470

CVE-2008-2470 : The InstallShield Update Service Agent ActiveX control in isusweb.dll has a memory corruption vulnerability triggered by ExecuteRemote() with a URL returning 404. This can allow remote, unauthenticated attackers to execute arbitrary code or crash the browser. The issue affects the...