10
CVE-2007-2419
- EPSS 5.53%
- Veröffentlicht 06.06.2007 10:30:00
- Zuletzt bearbeitet 16.06.2026 22:39:32
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginMultiple buffer overflows in an ActiveX control (boisweb.dll) in Macrovision FLEXnet Connect 6.0 and Update Service 3.x to 5.x allow remote attackers to execute arbitrary code via the (1) the second parameter to the DownloadAndExecute method and (2) third parameter to the AddFileEx method, a different vulnerability than CVE-2007-0328.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Macrovision ≫ Flexnet Connect Version6.0
Macrovision ≫ Update Service Version3.0
Macrovision ≫ Update Service Version4.0
Macrovision ≫ Update Service Version5.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 5.53% | 0.918 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 10 | 10 | 10 |
AV:N/AC:L/Au:N/C:C/I:C/A:C
|
http://support.installshield.com/kb/view.asp?articleid=Q113020
http://dvlabs.tippingpoint.com/advisory/TPTI-07-09
http://osvdb.org/36983
http://secunia.com/advisories/25509
http://www.securityfocus.com/archive/1/470585/100/0/threaded
http://www.securitytracker.com/id?1018195
http://www.vupen.com/english/advisories/2007/2070
https://exchange.xforce.ibmcloud.com/vulnerabilities/34721