CVE-2007-5660

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 36.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-11-02 · updated 2026-06-16

Description

Unspecified vulnerability in the Update Service ActiveX control in isusweb.dll before 6.0.100.65101 in MacroVision FLEXnet Connect and InstallShield 2008 allows remote attackers to execute arbitrary code via an unspecified "unsafe method," possibly involving a buffer overflow.

Affected products

Macrovision Flexnet Connect: all versions
Macrovision Installshield 2008: all versions
Macrovision Update Service: 3.0, 4.0, 5.0, 5.1.100_47363, 6.0.100_60146

References

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=618
http://osvdb.org/38347
http://secunia.com/advisories/27475
http://support.installshield.com/kb/view.asp?articleid=Q113020
http://support.installshield.com/kb/view.asp?articleid=Q113602
http://www.macrovision.com/promolanding/7660.htm
http://www.securityfocus.com/bid/26280
http://www.securitytracker.com/id?1018881
http://www.vupen.com/english/advisories/2007/3670
https://exchange.xforce.ibmcloud.com/vulnerabilities/38210
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=618
http://osvdb.org/38347

Get alerted when CVE-2007-5660 or the next vulnerability affects your stack