OSVDB ID: 39980

Title: Macrovision InstallShield Update Service Web Agent ActiveX DownloadAndExecute Method Arbitrary Code Execution

Info

Disclosure

Dec 24, 2007

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Dec 24, 2007

Description

Classification

Location: Remote / Network Access, Context Dependent
Attack Type: Input Manipulation
Impact: Loss of Integrity
Solution: Solution Unknown
Exploit: Exploit Public, Exploit Commercial
Disclosure: Vendor Verified
OSVDB: Web Related

Solution

Products

Unknown or Incomplete

References

CVE ID: 2007-6654 (see also: NVD)
ISS X-Force ID: 39204
Milw0rm: 4819
Exploit Database: 4819
Mail List Post: http://lists.grok.org.uk/pipermail/full-disclosure/2007-December/059288.html
Generic Exploit URL: http://www.saintcorporation.com/cgi-bin/exploit_info/installshield_update_downloadandexecute

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/39980