CVE-2007-5661

The Macrovision InstallShield InstallScript One-Click Install (OCI) ActiveX control 12.0 before SP2 does not validate the DLL files that are named as parameters to the control, which allows remote attackers to download arbitrary library code onto a client machine.

Link	Resource
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=649
http://knowledge.macrovision.com/selfservice/microsites/search.do?cmd=displayKC&externalId=Q113640	Patch
http://www.securityfocus.com/bid/28533	Patch
http://securitytracker.com/id?1019735
http://secunia.com/advisories/29549	Patch Vendor Advisory
http://www.vupen.com/english/advisories/2008/1049
https://exchange.xforce.ibmcloud.com/vulnerabilities/41558

Configuration 1

cpe:2.3:a:macrovision:installshield:*:sp1:*:*:*:*:*:* cpe:2.3:a:macrovision:installshield:*:sp1:*:*:*:*:*:*

---

Published : 2008-04-04 12:44

Updated : 2017-07-29 01:33

---

NVD link : CVE-2007-5661

Mitre link : CVE-2007-5661

No products.

CWE-94