CVE-2007-0321

Buffer overflow in the Update Service Agent ActiveX Control in isusweb.dll for Macrovision FLEXnet Connect (formerly InstallShield Update Service) allows remote attackers to execute arbitrary code via the Download method.

CVSS v2.0 9.3 HIGH

9.3^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability : 8.6 / Impact : 10.0

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://www.kb.cert.org/vuls/id/MAPG-6UERNR
http://www.kb.cert.org/vuls/id/847993	US Government Resource
http://secunia.com/advisories/24270
http://support.installshield.com/kb/view.asp?articleid=Q113020
http://osvdb.org/33532
http://www.vupen.com/english/advisories/2007/0706
https://exchange.xforce.ibmcloud.com/vulnerabilities/32678

Advertisement

Configurations

Configuration 1 (hide)

cpe:2.3:a:macrovision:flexnet_connect:*:*:*:*:*:*:*:*

Information

Published : 2007-02-22 19:28

Updated : 2017-07-28 18:30

NVD link : CVE-2007-0321

Mitre link : CVE-2007-0321

JSON object : View

CWE

NVD-CWE-Other

Advertisement

Products Affected

macrovision

flexnet_connect

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://www.kb.cert.org/vuls/id/MAPG-6UERNR", "name": "http://www.kb.cert.org/vuls/id/MAPG-6UERNR", "tags": [], "refsource": "CONFIRM"}, {"url": "http://www.kb.cert.org/vuls/id/847993", "name": "VU#847993", "tags": ["US Government Resource"], "refsource": "CERT-VN"}, {"url": "http://secunia.com/advisories/24270", "name": "24270", "tags": [], "refsource": "SECUNIA"}, {"url": "http://support.installshield.com/kb/view.asp?articleid=Q113020", "name": "http://support.installshield.com/kb/view.asp?articleid=Q113020", "tags": [], "refsource": "CONFIRM"}, {"url": "http://osvdb.org/33532", "name": "33532", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.vupen.com/english/advisories/2007/0706", "name": "ADV-2007-0706", "tags": [], "refsource": "VUPEN"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32678", "name": "macrovision-updateservice-activex-bo(32678)", "tags": [], "refsource": "XF"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Buffer overflow in the Update Service Agent ActiveX Control in isusweb.dll for Macrovision FLEXnet Connect (formerly InstallShield Update Service) allows remote attackers to execute arbitrary code via the Download method."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2007-0321", "ASSIGNER": "cert@cert.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 9.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "severity": "HIGH", "impactScore": 10.0, "obtainAllPrivilege": true, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}}, "publishedDate": "2007-02-23T03:28Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:macrovision:flexnet_connect:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2017-07-29T01:30Z"}