Macrovision InstallShield Update Service ActiveX Unsafe Method

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Macrovision...

Macrovision InstallShield Update Service Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Macrovision...

CVE-2008-4586

Insecure method vulnerability in the MVSNCLientWebAgent61.WebAgent.1 ActiveX control isusweb.dll 6.1.100.61372 in Macrovision FLEXnet Connect 6.1 allows remote attackers to force the download and execution of arbitrary files via the DownloadAndExecute method...

Design/Logic Flaw

Insecure method vulnerability in the MVSNCLientWebAgent61.WebAgent.1 ActiveX control isusweb.dll 6.1.100.61372 in Macrovision FLEXnet Connect 6.1 allows remote attackers to force the download and execution of arbitrary files via the DownloadAndExecute method...

CVE-2008-4586

Insecure method vulnerability in the MVSNCLientWebAgent61.WebAgent.1 ActiveX control isusweb.dll 6.1.100.61372 in Macrovision FLEXnet Connect 6.1 allows remote attackers to force the download and execution of arbitrary files via the DownloadAndExecute method...

CVE-2008-4586

In CVE-2008-4586, the affected product is Macrovision FLEXnet Connect 6.1, specifically the MVSNCLientWebAgent61.WebAgent.1 ActiveX control (isusweb.dll 6.1.100.61372). The issue is an insecure method vulnerability that allows remote attackers to force the download and execution of arbitrary file...

CVE-2008-4587

Insecure method vulnerability in the MSVNClientDownloadManager61Lib.DownloadManager.1 ActiveX control ISDM.exe 6.1.100.61372 in Macrovision FLEXnet Connect 6.1 allows remote attackers to force the download and execution of arbitrary files via the AddFile and RunScheduledJobs methods. NOTE: this...

CVE-2008-4586

Insecure method vulnerability in the MVSNCLientWebAgent61.WebAgent.1 ActiveX control isusweb.dll 6.1.100.61372 in Macrovision FLEXnet Connect 6.1 allows remote attackers to force the download and execution of arbitrary files via the DownloadAndExecute method...

CVE-2008-4587

CVE-2008-4587 describes an insecure method vulnerability in the MSVNClientDownloadManager61Lib.DownloadManager.1 ActiveX control (ISDM.exe 6.1.100.61372) of Macrovision FLEXnet Connect 6.1. An attacker could force the download and execution of arbitrary files via AddFile and RunScheduledJobs, wit...

Macrovision InstallShield Update Service ActiveX Unsafe Method

This module allows attackers to execute code via an unsafe method in Macrovision InstallShield 2008. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Macrovision InstallShield Update Service...

Macrovision InstallShield Update Service Agent ActiveX Memory Corruption (CVE-2008-2470)

Macrovision InstallShield is a software tool for creating installers or software packages. A memory corruption vulnerability has been reported in Macrovision InstallShield Update Service. The vulnerability is due to a design error in the Macrovision InstallShield Update Service while processing...

InstallShield / Macrovision / Acresso FLEXnet Connect insecurely retrieves and executes scripts

Overview Acresso FLEXnet Connect executes scripts that are insecurely retrieved from a remote web server, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Acresso FLEXnet Connect is a software package that allows vendors to provide...

CVE-2007-5661

The Macrovision InstallShield InstallScript One-Click Install OCI ActiveX control 12.0 before SP2 does not validate the DLL files that are named as parameters to the control, which allows remote attackers to download arbitrary library code onto a client machine...

CVE-2007-5661

The CVE-2007-5661 issue affects Macrovision InstallShield InstallScript One-Click Install ActiveX control (12.0 before SP2). The OCI ActiveX loads DLLs from remote sites without validating the libraries, enabling remote code execution with the user’s privileges when a user visits a crafted web pa...

CVE-2007-5661

The Macrovision InstallShield InstallScript One-Click Install OCI ActiveX control 12.0 before SP2 does not validate the DLL files that are named as parameters to the control, which allows remote attackers to download arbitrary library code onto a client machine...

PT-2008-1509 · Macrovision · Installshield Installscript One-Click Install (Oci) Activex Control

Name of the Vulnerable Software and Affected Versions: Macrovision InstallShield InstallScript One-Click Install OCI ActiveX control version 12.0 before SP2 Description: The issue concerns the failure of the Macrovision InstallShield InstallScript One-Click Install OCI ActiveX control to validate...

Macrovision InstallShield InstallScript OCI控件不可信任库代码执行漏洞

BUGTRAQ ID: 28533 CVECAN ID: CVE-2007-5661 MacroVision InstallShield是很多软件厂商都在使用的安装程序解决方案。 InstallShield所安装的InstallScript One-Click Install ActiveX控件加载了不可信任的函数库，可能允许远程攻击者以当前登录用户的权限执行任意命令。 InstallShield InstallScript One-Click Install控件的属性如下： 文件：%WINDIR%\Downloaded Program Files\setup.exe...

Macrovision InstallShield InstallScript One-Click Install ActiveX code exectuion

Control allows to download and execute dynamic library from remote site...

iDefense Security Advisory 03.31.08: Macrovision InstallShield InstallScript One-Click Install Untrusted Library Loading Vulnerability

iDefense Security Advisory 03.31.08 http://labs.idefense.com/intelligence/vulnerabilities/ Mar 31, 2008 I. BACKGROUND Macrovision InstallShield InstallScript One-Click Install OCI is a web based installer technology that allows software publishers to distribute minimal installer packages which...

Macrovision InstallShield Update Service ActiveX Control Code Execution (CVE-2007-5660)

Macrovision InstallShield is a software tool for creating installers or software packages. This vulnerability is due to errors in the Macrovision InstallShield Update Service ActiveX Control when handling webpage scripts. To trigger this issue, an attacker may create a malicious web page that wil...