NVD

Id
52555  
Name
CVE-2007-0328  
Description
The DWUpdateService ActiveX control in the agent (agent.exe) in Macrovision FLEXnet Connect 6.0 and Update Service 3.x to 5.x allows remote attackers to execute arbitrary commands via (1) the Execute method, and obtain the exit status using (2) the GetExitCode method.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-05-31  
Modified Date
2011-07-11  
Seq
2007-0328  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
265598 52555 CVE-2007-0328 http://support.installshield.com/kb/view.asp?articleid=Q113020  View
265599 52555 CVE-2007-0328 http://www.blackberry.com/btsc/articles/749/KB16469_f.SAL_Public.html  View
265600 52555 CVE-2007-0328 VU#524681  View
265601 52555 CVE-2007-0328 ADV-2007-2017  View
265602 52555 CVE-2007-0328 ADV-2008-3278  View
265603 52555 CVE-2007-0328 macrovision-dwupdate-command-execution(34660)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
54538 JVNDB-2007-003230 Macrovision FLEXnet Connect などの agent における任意のコマンドを実行される脆弱性 Macrovision FLEXnet Connect および Update Service の agent 内にある DWUpdateService ActiveX コントロールには、任意のコマンドを実行される脆弱性が存在します。 CVE-2007-0328 23683 CVE-2007-0328 52555 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003230.html 2007-05-31 2012-09-25 View