CVEvulnerability
CVE-2008-4587
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-10-15
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Description
Insecure method vulnerability in the MSVNClientDownloadManager61Lib.DownloadManager.1 ActiveX control (ISDM.exe 6.1.100.61372) in Macrovision FLEXnet Connect 6.1 allows remote attackers to force the download and execution of arbitrary files via the AddFile and RunScheduledJobs methods. NOTE: this could be leveraged for code execution by uploading executable files to Startup folders.
Affected configurations
• acresso flexnet connect 6.1
References
- http://secunia.com/advisories/28496 Vendor Advisory
- http://securityreason.com/securityalert/4428 securityreason.com
- http://www.securityfocus.com/bid/27279 www.securityfocus.com
- http://www.vupen.com/english/advisories/2008/0145 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39653 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/4909 www.exploit-db.com
- http://secunia.com/advisories/28496 Vendor Advisory
- http://securityreason.com/securityalert/4428 securityreason.com
- http://www.securityfocus.com/bid/27279 www.securityfocus.com
- http://www.vupen.com/english/advisories/2008/0145 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39653 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/4909 www.exploit-db.com