CVEvulnerability
CVE-2007-5661
9.3 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2008-04-04
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-94
Description
The Macrovision InstallShield InstallScript One-Click Install (OCI) ActiveX control 12.0 before SP2 does not validate the DLL files that are named as parameters to the control, which allows remote attackers to download arbitrary library code onto a client machine.
Affected configurations
• revenera installshield (< 12)
• revenera installshield 12
Related
Weakness · CWE (1)
- CWE-94 Improper Control of Generation of Code weakness
References
- http://knowledge.macrovision.com/selfservice/microsites/search.do?cmd=displayKC&externalId=Q113640 Patch
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=649 Not Applicable
- http://secunia.com/advisories/29549 Patch, Vendor Advisory
- http://securitytracker.com/id?1019735 Not Applicable
- http://www.securityfocus.com/bid/28533 Patch
- http://www.vupen.com/english/advisories/2008/1049 Not Applicable
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41558 Third Party Advisory
- http://knowledge.macrovision.com/selfservice/microsites/search.do?cmd=displayKC&externalId=Q113640 Patch
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=649 Not Applicable
- http://secunia.com/advisories/29549 Patch, Vendor Advisory
- http://securitytracker.com/id?1019735 Not Applicable
- http://www.securityfocus.com/bid/28533 Patch
- http://www.vupen.com/english/advisories/2008/1049 Not Applicable
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41558 Third Party Advisory