PT-2007-6664 · Macrovision · Macrovision Flexnet Connect+1

Published 2007-11-02 · Updated 2017-07-29 · CVE-2007-5660

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions MacroVision FLEXnet Connect and InstallShield 2008 versions prior to 6.0.100.65101

Description The issue is related to an unspecified vulnerability in the Update Service ActiveX control. This vulnerability allows remote attackers to execute arbitrary code, possibly through a buffer overflow. The exact details of the exploitation method are not specified, but it involves an "unsafe method".

Recommendations For versions prior to 6.0.100.65101, update to version 6.0.100.65101 or later to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2007-5660

Affected Products

Installshield

Macrovision Flexnet Connect

References · 16

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/macrovision_unsafe.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/macrovision_downloadandexecute.rb · Exploit
• 🔥 https://exploit-db.com/exploits/16602 · Exploit
• 🔥 https://exploit-db.com/exploits/16573 · Exploit
• http://macrovision.com/promolanding/7660.htm · Patch
• http://support.installshield.com/kb/view.asp?articleid=Q113020 · Patch
• http://secunia.com/advisories/27475 · Vendor Advisory
• http://support.installshield.com/kb/view.asp?articleid=Q113602 · Patch
• http://securityfocus.com/bid/26280 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2007-5660 · Security Note
• http://vupen.com/english/advisories/2007/3670 · Note
• http://securitytracker.com/id?1018881 · Note
• http://osvdb.org/38347 · Note
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=618 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5660 · Note