CVE-2007-5660
MacroVision FLEXnet Connect and InstallShield 2008 - Remote Code Execution via Update Service ActiveX Control
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2007-5660.
PoCs published by Metasploit, MC, including Metasploit module exploits/windows/browser/macrovision_downloadandexecute.
AI-analyzed exploit summary This Metasploit module exploits an unsafe ActiveX method in Macrovision InstallShield 2008 via a malicious HTML page. It leverages the `DownloadAndExecute` method to fetch and execute a payload from a remote server.
Description
Unspecified vulnerability in the Update Service ActiveX control in isusweb.dll before 6.0.100.65101 in MacroVision FLEXnet Connect and InstallShield 2008 allows remote attackers to execute arbitrary code via an unspecified "unsafe method," possibly involving a buffer overflow.
Exploits (4)
This Metasploit module exploits an unsafe ActiveX method in Macrovision InstallShield 2008 via a malicious HTML page. It leverages the `DownloadAndExecute` method to fetch and execute a payload from a remote server.
This exploit targets a stack buffer overflow in Macrovision InstallShield Update Service (Isusweb.dll 6.0.100.54472) via an overly long ProductCode string in the DownloadAndExecute method. It delivers a payload through a malicious HTML page with embedded JavaScript to achieve remote code execution.
This Metasploit module exploits a stack buffer overflow in Macrovision InstallShield Update Service (Isusweb.dll 6.0.100.54472) via an overly long ProductCode string in the DownloadAndExecute method. It delivers a payload through a malicious HTML page with embedded JavaScript to achieve remote code execution.
This Metasploit module exploits an unsafe ActiveX method in Macrovision InstallShield Update Service, allowing remote code execution via crafted HTML content. It leverages the `DownloadAndExecute` method to fetch and execute a malicious payload.