CVEvulnerability

CVE-2007-2419

10.0 HIGH Published 2007-06-06 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2007-06-06
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

Multiple buffer overflows in an ActiveX control (boisweb.dll) in Macrovision FLEXnet Connect 6.0 and Update Service 3.x to 5.x allow remote attackers to execute arbitrary code via the (1) the second parameter to the DownloadAndExecute method and (2) third parameter to the AddFileEx method, a different vulnerability than CVE-2007-0328.

Affected configurations

• macrovision flexnet connect 6.0 • macrovision update service 3.0 • macrovision update service 4.0 • macrovision update service 5.0

References

http://dvlabs.tippingpoint.com/advisory/TPTI-07-09 Patch
http://osvdb.org/36983 osvdb.org
http://secunia.com/advisories/25509 Vendor Advisory
http://support.installshield.com/kb/view.asp?articleid=Q113020 Patch
http://www.securityfocus.com/archive/1/470585/100/0/threaded www.securityfocus.com
http://www.securitytracker.com/id?1018195 www.securitytracker.com
http://www.vupen.com/english/advisories/2007/2070 www.vupen.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/34721 exchange.xforce.ibmcloud.com
http://dvlabs.tippingpoint.com/advisory/TPTI-07-09 Patch
http://osvdb.org/36983 osvdb.org
http://secunia.com/advisories/25509 Vendor Advisory
http://support.installshield.com/kb/view.asp?articleid=Q113020 Patch
http://www.securityfocus.com/archive/1/470585/100/0/threaded www.securityfocus.com
http://www.securitytracker.com/id?1018195 www.securitytracker.com
http://www.vupen.com/english/advisories/2007/2070 www.vupen.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/34721 exchange.xforce.ibmcloud.com