PT-2008-5803 · Macrovision · Macrovision Flexnet Connect

Elazar · Publicado 2008-10-15 · Atualizado 2017-09-29 · CVE-2008-4586

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Macrovision FLEXnet Connect version 6.1

Description The issue is related to an insecure method in the MVSNCLientWebAgent61.WebAgent.1 ActiveX control, which allows remote attackers to force the download and execution of arbitrary files. This is achieved via the DownloadAndExecute method.

Recommendations For Macrovision FLEXnet Connect version 6.1, consider disabling the DownloadAndExecute method in the MVSNCLientWebAgent61.WebAgent.1 ActiveX control as a temporary workaround until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2008-4586

Produtos afetados

Macrovision Flexnet Connect

Referências · 6

• 🔥 http://securityfocus.com/bid/27279 · Exploit
• 🔥 https://exploit-db.com/exploits/4913 · Exploit
• http://secunia.com/advisories/28496 · Aviso do Fabricante
• http://vupen.com/english/advisories/2008/0145 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-4586 · Nota de Segurança
• http://securityreason.com/securityalert/4425 · Nota