PT-2007-6664 · Macrovision · Macrovision Flexnet Connect+1

Publicado 2007-11-02 · Atualizado 2017-07-29 · CVE-2007-5660

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions MacroVision FLEXnet Connect and InstallShield 2008 versions prior to 6.0.100.65101

Description The issue is related to an unspecified vulnerability in the Update Service ActiveX control. This vulnerability allows remote attackers to execute arbitrary code, possibly through a buffer overflow. The exact details of the exploitation method are not specified, but it involves an "unsafe method".

Recommendations For versions prior to 6.0.100.65101, update to version 6.0.100.65101 or later to resolve the issue.

Exploit

Correção

Identificadores relacionados

CVE-2007-5660

Produtos afetados

Installshield

Macrovision Flexnet Connect

Referências · 16

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/macrovision_unsafe.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/macrovision_downloadandexecute.rb · Exploit
• 🔥 https://exploit-db.com/exploits/16602 · Exploit
• 🔥 https://exploit-db.com/exploits/16573 · Exploit
• http://vupen.com/english/advisories/2007/3670 · Nota
• http://macrovision.com/promolanding/7660.htm · Correção
• http://support.installshield.com/kb/view.asp?articleid=Q113020 · Correção
• http://secunia.com/advisories/27475 · Aviso do Fabricante
• http://support.installshield.com/kb/view.asp?articleid=Q113602 · Correção
• http://securityfocus.com/bid/26280 · Correção
• http://securitytracker.com/id?1018881 · Nota
• http://osvdb.org/38347 · Nota
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=618 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-5660 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5660 · Nota