CVE Vulnerabilities

CVE-2007-0328

Published: Jun 01, 2007 | Modified: Nov 21, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
9.3 HIGH
AV:N/AC:M/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

The DWUpdateService ActiveX control in the agent (agent.exe) in Macrovision FLEXnet Connect 6.0 and Update Service 3.x to 5.x allows remote attackers to execute arbitrary commands via (1) the Execute method, and obtain the exit status using (2) the GetExitCode method.

Affected Software

Name Vendor Start Version End Version
Flexnet_connect Macrovision 6.0 (including) 6.0 (including)
Update_service Macrovision 3.0 (including) 3.0 (including)
Update_service Macrovision 4.0 (including) 4.0 (including)
Update_service Macrovision 5.0 (including) 5.0 (including)

References