CVE-2007-5661

CVSS V2 High 9.3 CVSS V3 None
Description
The Macrovision InstallShield InstallScript One-Click Install (OCI) ActiveX control 12.0 before SP2 does not validate the DLL files that are named as parameters to the control, which allows remote attackers to download arbitrary library code onto a client machine.
Overview
  • CVE ID
  • CVE-2007-5661
  • Assigner
  • cve@mitre.org
  • Vulnerability Status
  • Modified
  • Published Version
  • 2008-04-04T00:44:00
  • Last Modified Date
  • 2017-07-29T01:33:47
Weakness Enumerations
CWE URL
CWE-94 http://cwe.mitre.org/data/definitions/94.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:macrovision:installshield:*:sp1:*:*:*:*:*:* 1 OR 12_premier
cpe:2.3:a:macrovision:installshield:*:sp1:*:*:*:*:*:* 1 OR 12_professional
CVSS Version 2
  • Version
  • 2.0
  • Vector String
  • AV:N/AC:M/Au:N/C:C/I:C/A:C
  • Access Vector
  • NETWORK
  • Access Compatibility
  • MEDIUM
  • Authentication
  • NONE
  • Confidentiality Impact
  • COMPLETE
  • Integrity Impact
  • COMPLETE
  • Availability Impact
  • COMPLETE
  • Base Score
  • 9.3
  • Severity
  • HIGH
  • Exploitability Score
  • 8.6
  • Impact Score
  • 10
References
Reference URL Reference Tags
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=649
http://knowledge.macrovision.com/selfservice/microsites/search.do?cmd=displayKC&externalId=Q113640 Patch
http://www.securityfocus.com/bid/28533 Patch
http://securitytracker.com/id?1019735
http://secunia.com/advisories/29549 Patch Vendor Advisory
http://www.vupen.com/english/advisories/2008/1049
https://exchange.xforce.ibmcloud.com/vulnerabilities/41558
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2007-5661
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5661
History
Created Old Value New Value Data Type Notes
2022-05-10 09:11:51 Added to TrackCVE