CVE-2007-2419 - CVE House
Back to Database
Status published Critical CVE-2007-2419

Multiple buffer overflows in an ActiveX control (boisweb.dll) in Macrovision...

Vulnerability Description

Multiple buffer overflows in an ActiveX control (boisweb.dll) in Macrovision FLEXnet Connect 6.0 and Update Service 3.x to 5.x allow remote attackers to execute arbitrary code via the (1) the second parameter to the DownloadAndExecute method and (2) third parameter to the AddFileEx method, a different vulnerability than CVE-2007-0328.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-2419

Credits & Attribution

No credits recorded in the NVD database.

References

More from macrovision

View All →
CVE-2008-2470
The InstallShield Update Service Agent ActiveX control in isusweb.dll allows...
Critical 9.3
CVE-2007-6654
Buffer overflow in a certain ActiveX control in Macrovision InstallShield...
Critical 9.3
CVE-2007-5660
Unspecified vulnerability in the Update Service ActiveX control in isusweb.dll...
Critical 9.3
CVE-2007-5587
Buffer overflow in Macrovision SafeDisc secdrv.sys before 4.3.86.0, as shipped...
Medium 6.9
CVE-2007-1009
Macrovision InstallAnywhere Enterprise before 8.0.1 uses the InstallScript.iap_xml configuration file...
Medium 4.6

Affected Vendor

macrovision

View all reports →

Affected Software

flexnet connect, update service
Vulnerable Versions:
6.0, 3.0, 4.0, 5.0

Timeline

Official Publish: June 6th, 2007
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.