What’s Vulnerable › Vulnerabilities

CVE-2007-0320

• Severity: critical (CVSS 9.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 5.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2007-02-23 · updated 2026-06-16
• Weakness: CWE-119

Description

Multiple buffer overflows in (a) an ActiveX control (iftw.dll) and (b) Netscape plug-in (npiftw32.dll) for Macrovision (formerly InstallShield) InstallFromTheWeb allow remote attackers to execute arbitrary code via crafted HTML documents.

Affected products

• Macrovision Installfromtheweb: all versions

References

• http://osvdb.org/33530
• http://osvdb.org/33531
• http://secunia.com/advisories/24285
• http://www.kb.cert.org/vuls/id/181041
• http://www.kb.cert.org/vuls/id/MAPG-6UQUDP
• http://www.securityfocus.com/bid/22672
• http://www.vupen.com/english/advisories/2007/0705
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32645
• http://osvdb.org/33530
• http://osvdb.org/33531
• http://secunia.com/advisories/24285
• http://www.kb.cert.org/vuls/id/181041

Get alerted when CVE-2007-0320 or the next vulnerability affects your stack