CVE-2007-5660

50Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 37%

from disclosure to weapon919 days

Published on NVDNov 2

1st PoC+919d

metasploitOct 20

exploitation probability

37%top 2% of all CVEs

observed exploitation

nono source reports it

2 public exploit(s)

Unspecified vulnerability in the Update Service ActiveX control in isusweb.dll before 6.0.100.65101 in MacroVision FLEXnet Connect and InstallShield 2008 allows remote attackers to execute arbitrary code via an unspecified "unsafe method," possibly involving a buffer overflow.

Affected products

n/a · n/a

public PoCs found — 2

exploitdbwww.exploit-db.com/exploits/16602unverified exploitdbwww.exploit-db.com/exploits/16573unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=618 http://osvdb.org/38347 http://secunia.com/advisories/27475 https://exchange.xforce.ibmcloud.com/vulnerabilities/38210 http://support.installshield.com/kb/view.asp?articleid=Q113020 http://support.installshield.com/kb/view.asp?articleid=Q113602 http://www.macrovision.com/promolanding/7660.htm http://www.securityfocus.com/bid/26280 http://www.securitytracker.com/id?1018881 http://www.vupen.com/english/advisories/2007/3670