Lucene search

K
cveCertccCVE-2007-0321
HistoryFeb 23, 2007 - 3:28 a.m.

CVE-2007-0321

2007-02-2303:28:00
certcc
web.nvd.nist.gov
52
cve
buffer overflow
update service
activex control
isusweb.dll
macrovision flexnet connect
installshield update service

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

Low

EPSS

0.117

Percentile

95.3%

Buffer overflow in the Update Service Agent ActiveX Control in isusweb.dll for Macrovision FLEXnet Connect (formerly InstallShield Update Service) allows remote attackers to execute arbitrary code via the Download method.

Affected configurations

Nvd
Node
macrovisionflexnet_connect
VendorProductVersionCPE
macrovisionflexnet_connect*cpe:2.3:a:macrovision:flexnet_connect:*:*:*:*:*:*:*:*

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

Low

EPSS

0.117

Percentile

95.3%