CVE-2007-0328 - CVE House
Back to Database
Status published Critical CVE-2007-0328

The DWUpdateService ActiveX control in the agent (agent.exe) in Macrovision...

Vulnerability Description

The DWUpdateService ActiveX control in the agent (agent.exe) in Macrovision FLEXnet Connect 6.0 and Update Service 3.x to 5.x allows remote attackers to execute arbitrary commands via (1) the Execute method, and obtain the exit status using (2) the GetExitCode method.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-0328

Credits & Attribution

No credits recorded in the NVD database.

References

More from macrovision

View All →
CVE-2008-2470
The InstallShield Update Service Agent ActiveX control in isusweb.dll allows...
Critical 9.3
CVE-2007-6654
Buffer overflow in a certain ActiveX control in Macrovision InstallShield...
Critical 9.3
CVE-2007-5660
Unspecified vulnerability in the Update Service ActiveX control in isusweb.dll...
Critical 9.3
CVE-2007-5587
Buffer overflow in Macrovision SafeDisc secdrv.sys before 4.3.86.0, as shipped...
Medium 6.9
CVE-2007-2419
Multiple buffer overflows in an ActiveX control (boisweb.dll) in Macrovision...
Critical 10

Affected Vendor

macrovision

View all reports →

Affected Software

flexnet connect, update service
Vulnerable Versions:
6.0, 3.0, 4.0, 5.0

Timeline

Official Publish: June 1st, 2007
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.