CVE-2007-6654 - CVE House
Back to Database
Status published Critical CVE-2007-6654

Buffer overflow in a certain ActiveX control in Macrovision InstallShield...

Vulnerability Description

Buffer overflow in a certain ActiveX control in Macrovision InstallShield Update Service Web Agent 5.1.100.47363 allows remote attackers to execute arbitrary code via a long string in the ProductCode argument (second argument) to the DownloadAndExecute method, a different vulnerability than CVE-2007-0321, CVE-2007-2419, and CVE-2007-5660.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-6654

Credits & Attribution

No credits recorded in the NVD database.

References

More from macrovision

View All →
CVE-2008-2470
The InstallShield Update Service Agent ActiveX control in isusweb.dll allows...
Critical 9.3
CVE-2007-5660
Unspecified vulnerability in the Update Service ActiveX control in isusweb.dll...
Critical 9.3
CVE-2007-5587
Buffer overflow in Macrovision SafeDisc secdrv.sys before 4.3.86.0, as shipped...
Medium 6.9
CVE-2007-2419
Multiple buffer overflows in an ActiveX control (boisweb.dll) in Macrovision...
Critical 10
CVE-2007-1009
Macrovision InstallAnywhere Enterprise before 8.0.1 uses the InstallScript.iap_xml configuration file...
Medium 4.6

Affected Vendor

macrovision

View all reports →

Affected Software

update service
Vulnerable Versions:
5.1.100_47363

Timeline

Official Publish: January 4th, 2008
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.