9.3

CVE-2007-5660

Unspecified vulnerability in the Update Service ActiveX control in isusweb.dll before 6.0.100.65101 in MacroVision FLEXnet Connect and InstallShield 2008 allows remote attackers to execute arbitrary code via an unspecified "unsafe method," possibly involving a buffer overflow.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Macrovision ≫ Update Service Version3.0
Macrovision ≫ Update Service Version4.0
Macrovision ≫ Update Service Version5.0
Macrovision ≫ Update Service Version5.1.100_47363
Macrovision ≫ Update Service Version6.0.100_60146
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 36.62% 0.983
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://support.installshield.com/kb/view.asp?articleid=Q113020
Patch
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=618
http://osvdb.org/38347
http://secunia.com/advisories/27475
Patch
Vendor Advisory
http://support.installshield.com/kb/view.asp?articleid=Q113602
Patch
http://www.macrovision.com/promolanding/7660.htm
Patch
http://www.securityfocus.com/bid/26280
Patch
http://www.securitytracker.com/id?1018881
http://www.vupen.com/english/advisories/2007/3670
https://exchange.xforce.ibmcloud.com/vulnerabilities/38210