NVD

Id
2381  
Name
CVE-2008-2470  
Description
The InstallShield Update Service Agent ActiveX control in isusweb.dll allows remote attackers to cause a denial of service (memory corruption and browser crash) and possibly execute arbitrary code via a call to ExecuteRemote with a URL that results in a 404 error response.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-09-18  
Modified Date
2011-03-07  
Seq
2008-2470  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
15233 2381 CVE-2008-2470 http://support.installshield.com/kb/view.asp?articleid=Q113020  View
15234 2381 CVE-2008-2470 VU#630017  View
15235 2381 CVE-2008-2470 31235  View
15236 2381 CVE-2008-2470 ADV-2008-2625  View
15237 2381 CVE-2008-2470 installshield-updateservice-bo(45248)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46427 JVNDB-2008-001737 InstallShield の ActiveX コントロール Update Service Agent にバッファオーバーフローの脆弱性 InstallShield の ActiveX コントロール Update Service Agent には、バッファオーバーフローの脆弱性が存在します。結果として遠隔の第三者によって任意のコードを実行される可能性があります。 CVE-2008-2470 32583 CVE-2008-2470 2381 9.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001737.html 2008-09-24 2008-10-15 View