CVEvulnerability
CVE-2007-0328
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-06-01
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Description
The DWUpdateService ActiveX control in the agent (agent.exe) in Macrovision FLEXnet Connect 6.0 and Update Service 3.x to 5.x allows remote attackers to execute arbitrary commands via (1) the Execute method, and obtain the exit status using (2) the GetExitCode method.
Affected configurations
• macrovision flexnet connect 6.0
• macrovision update service 3.0
• macrovision update service 4.0
• macrovision update service 5.0
References
- http://osvdb.org/36896 osvdb.org
- http://secunia.com/advisories/25501 Vendor Advisory
- http://secunia.com/advisories/32842 Vendor Advisory
- http://support.installshield.com/kb/view.asp?articleid=Q113020 Patch
- http://www.blackberry.com/btsc/articles/749/KB16469_f.SAL_Public.html www.blackberry.com
- http://www.kb.cert.org/vuls/id/524681 Patch, US Government Resource
- http://www.vupen.com/english/advisories/2007/2017 Vendor Advisory
- http://www.vupen.com/english/advisories/2008/3278 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34660 exchange.xforce.ibmcloud.com
- http://osvdb.org/36896 osvdb.org
- http://secunia.com/advisories/25501 Vendor Advisory
- http://secunia.com/advisories/32842 Vendor Advisory
- http://support.installshield.com/kb/view.asp?articleid=Q113020 Patch
- http://www.blackberry.com/btsc/articles/749/KB16469_f.SAL_Public.html www.blackberry.com
- http://www.kb.cert.org/vuls/id/524681 Patch, US Government Resource
- http://www.vupen.com/english/advisories/2007/2017 Vendor Advisory
- http://www.vupen.com/english/advisories/2008/3278 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34660 exchange.xforce.ibmcloud.com