Vulnerabilities > CVE-2008-2470 - Buffer Overflow vulnerability in Macrovision Flexnet Connect 6.0

047910
CVSS 9.3 - CRITICAL
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
network
macrovision
critical

Summary

The InstallShield Update Service Agent ActiveX control in isusweb.dll allows remote attackers to cause a denial of service (memory corruption and browser crash) and possibly execute arbitrary code via a call to ExecuteRemote with a URL that results in a 404 error response.

Vulnerable Configurations

Part Description Count
Application
Macrovision
1