CVE-2007-1009 - CVE House
Back to Database
Status published Medium CVE-2007-1009

Macrovision InstallAnywhere Enterprise before 8.0.1 uses the InstallScript.iap_xml configuration file...

Vulnerability Description

Macrovision InstallAnywhere Enterprise before 8.0.1 uses the InstallScript.iap_xml configuration file without integrity protection to verify authorization for installing an application, which allows local users to perform unauthorized installations by removing the (1) password or (2) serial number verification sections from this file.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-1009

Credits & Attribution

No credits recorded in the NVD database.

References

More from macrovision

View All →
CVE-2008-2470
The InstallShield Update Service Agent ActiveX control in isusweb.dll allows...
Critical 9.3
CVE-2007-6654
Buffer overflow in a certain ActiveX control in Macrovision InstallShield...
Critical 9.3
CVE-2007-5660
Unspecified vulnerability in the Update Service ActiveX control in isusweb.dll...
Critical 9.3
CVE-2007-5587
Buffer overflow in Macrovision SafeDisc secdrv.sys before 4.3.86.0, as shipped...
Medium 6.9
CVE-2007-2419
Multiple buffer overflows in an ActiveX control (boisweb.dll) in Macrovision...
Critical 10

Affected Vendor

macrovision

View all reports →

Affected Software

installanywhere
Vulnerable Versions:
8

Timeline

Official Publish: April 19th, 2007
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.