GCVE - cpe:2.3:a:macrovision:update_service:3.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:macrovision:update_service:3.0:*:*:*:*:*:*:*

part: a version: 3.0 update: *

Vendor	Macrovision (`6f0416ef-3798-55b9-beac-a0432b8af9b4`)
Product	Update Service (`932ad94e-80cf-5dd8-a290-3ef1bfbf9955`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2007-5660`	vulnerable	2026-06-08 04:50:06.658635	Details available Unspecified vulnerability in the Update Service ActiveX control in isusweb.dll before 6.0.100.65101 in MacroVision FLEXnet Connect and InstallShield 2008 allows remote attackers to execute arbitrary code via an unspecified "unsafe method," possibly involving a buffer overflow. Published: 2007-11-02T16:00:00.000Z Updated: 2024-08-07T15:39:13.712Z Open on db.gcve.eu Reference links http://support.installshield.com/kb/view.asp?articleid=Q113020 http://secunia.com/advisories/27475 http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=618 http://osvdb.org/38347 http://www.vupen.com/english/advisories/2007/3670	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-2419`	vulnerable	2026-06-08 04:49:44.854022	Details available Multiple buffer overflows in an ActiveX control (boisweb.dll) in Macrovision FLEXnet Connect 6.0 and Update Service 3.x to 5.x allow remote attackers to execute arbitrary code via the (1) the second parameter to the DownloadAndExecute method and (2) third parameter to the AddFileEx method, a different vulnerability than CVE-2007-0328. Published: 2007-06-06T10:00:00.000Z Updated: 2024-08-07T13:33:28.724Z Open on db.gcve.eu Reference links http://support.installshield.com/kb/view.asp?articleid=Q113020 https://exchange.xforce.ibmcloud.com/vulnerabilities/34721 http://dvlabs.tippingpoint.com/advisory/TPTI-07-09 http://www.vupen.com/english/advisories/2007/2070 http://osvdb.org/36983	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-0328`	vulnerable	2026-06-08 04:49:31.928611	Details available The DWUpdateService ActiveX control in the agent (agent.exe) in Macrovision FLEXnet Connect 6.0 and Update Service 3.x to 5.x allows remote attackers to execute arbitrary commands via (1) the Execute method, and obtain the exit status using (2) the GetExitCode method. Published: 2007-06-01T00:00:00.000Z Updated: 2024-08-07T12:12:18.093Z Open on db.gcve.eu Reference links http://osvdb.org/36896 http://support.installshield.com/kb/view.asp?articleid=Q113020 http://secunia.com/advisories/32842 http://www.blackberry.com/btsc/articles/749/KB16469_f.SAL_Public.html http://www.vupen.com/english/advisories/2007/2017	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.