CVE-2007-2419

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-06-06 · updated 2026-06-16

Description

Multiple buffer overflows in an ActiveX control (boisweb.dll) in Macrovision FLEXnet Connect 6.0 and Update Service 3.x to 5.x allow remote attackers to execute arbitrary code via the (1) the second parameter to the DownloadAndExecute method and (2) third parameter to the AddFileEx method, a different vulnerability than CVE-2007-0328.

Affected products

Macrovision Flexnet Connect: 6.0
Macrovision Update Service: 3.0, 4.0, 5.0

References

http://dvlabs.tippingpoint.com/advisory/TPTI-07-09
http://osvdb.org/36983
http://secunia.com/advisories/25509
http://support.installshield.com/kb/view.asp?articleid=Q113020
http://www.securityfocus.com/archive/1/470585/100/0/threaded
http://www.securitytracker.com/id?1018195
http://www.vupen.com/english/advisories/2007/2070
https://exchange.xforce.ibmcloud.com/vulnerabilities/34721
http://dvlabs.tippingpoint.com/advisory/TPTI-07-09
http://osvdb.org/36983
http://secunia.com/advisories/25509
http://support.installshield.com/kb/view.asp?articleid=Q113020

Get alerted when CVE-2007-2419 or the next vulnerability affects your stack