CVE-2007-5661

Опубликовано: 04 апр. 2008

Источник: nvd

CVSS2: 9.3

EPSS Низкий

Описание

The Macrovision InstallShield InstallScript One-Click Install (OCI) ActiveX control 12.0 before SP2 does not validate the DLL files that are named as parameters to the control, which allows remote attackers to download arbitrary library code onto a client machine.

Ссылки

http://knowledge.macrovision.com/selfservice/microsites/search.do?cmd=displayKC&externalId=Q113640
Patch
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=649
Not Applicable
http://secunia.com/advisories/29549
Patch
Vendor Advisory
http://securitytracker.com/id?1019735
Not Applicable
http://www.securityfocus.com/bid/28533
Patch
http://www.vupen.com/english/advisories/2008/1049
Not Applicable
https://exchange.xforce.ibmcloud.com/vulnerabilities/41558
Third Party Advisory
http://knowledge.macrovision.com/selfservice/microsites/search.do?cmd=displayKC&externalId=Q113640
Patch
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=649
Not Applicable
http://secunia.com/advisories/29549
Patch
Vendor Advisory
http://securitytracker.com/id?1019735
Not Applicable
http://www.securityfocus.com/bid/28533
Patch
http://www.vupen.com/english/advisories/2008/1049
Not Applicable
https://exchange.xforce.ibmcloud.com/vulnerabilities/41558
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:revenera:installshield:*:-:*:*:premier:*:*:*

Версия до 12 (исключая)

cpe:2.3:a:revenera:installshield:*:-:*:*:professional:*:*:*

Версия до 12 (исключая)

cpe:2.3:a:revenera:installshield:12:-:*:*:premier:*:*:*

cpe:2.3:a:revenera:installshield:12:-:*:*:professional:*:*:*

cpe:2.3:a:revenera:installshield:12:sp1:*:*:premier:*:*:*

cpe:2.3:a:revenera:installshield:12:sp1:*:*:professional:*:*:*

EPSS

Процентиль: 83%

0.01868

Низкий

9.3 Critical

CVSS2

Дефекты

CWE-94

Связанные уязвимости

GHSA-3xq6-78gm-vp7x

github

почти 4 года назад