macrovision records

10 published records for vendor macrovision.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 1 · 10%
Pre-auth RCE: 7
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer3

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

10 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
48Plan	CVE-2007-5660Weaponized	Unspecified vulnerability in the Update Service ActiveX control in isusweb.dll before 6.0.100.65101 in MacroVision FLEXnet Connect and Instamacrovision · flexnet connect pre-auth RCE	Critical9.3	—	36.6%	Nov 2, 2007
42Plan	CVE-2007-2419No exploit	Multiple buffer overflows in an ActiveX control (boisweb.dll) in Macrovision FLEXnet Connect 6.0 and Update Service 3.x to 5.x allow remote macrovision · flexnet connect pre-auth RCE	Critical10.0	—	5.5%	Jun 6, 2007
39Monitor	CVE-2007-0321No exploit	Buffer overflow in the Update Service Agent ActiveX Control in isusweb.dll for Macrovision FLEXnet Connect (formerly InstallShield Update Semacrovision · flexnet connect pre-auth RCE	Critical9.3	—	6.8%	Feb 22, 2007
39Monitor	CVE-2007-6654Proof of concept	Buffer overflow in a certain ActiveX control in Macrovision InstallShield Update Service Web Agent 5.1.100.47363 allows remote attackers to macrovision · update service · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	5.6%	Jan 4, 2008
39Monitor	CVE-2008-2470No exploit	The InstallShield Update Service Agent ActiveX control in isusweb.dll allows remote attackers to cause a denial of service (memory corruptiomacrovision · flexnet connect pre-auth RCE	Critical9.3	—	5.5%	Sep 18, 2008
39Monitor	CVE-2007-0320No exploit	Multiple buffer overflows in (a) an ActiveX control (iftw.dll) and (b) Netscape plug-in (npiftw32.dll) for Macrovision (formerly InstallShiemacrovision · installfromtheweb · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	5.4%	Feb 22, 2007
39Monitor	CVE-2007-0328No exploit	The DWUpdateService ActiveX control in the agent (agent.exe) in Macrovision FLEXnet Connect 6.0 and Update Service 3.x to 5.x allows remote macrovision · flexnet connect pre-auth RCE	Critical9.3	—	5.3%	May 31, 2007
28Monitor	CVE-2007-5587Proof of concept	Buffer overflow in Macrovision SafeDisc secdrv.sys before 4.3.86.0, as shipped in Microsoft Windows XP SP2, XP Professional x64 and x64 SP2,microsoft · windows 2003 server · CWE-119 Local privilege escalation Memory safety	Medium6.9	—	2.9%	Oct 19, 2007
28Monitor	CVE-2006-1197No exploit	SafeDisc installs the driver service for the secdrv.sys driver with insecure permissions, which allows local users to gain privileges by chamacrovision · safedisc Local privilege escalation	High7.2	—	0.4%	Mar 13, 2006
18Monitor	CVE-2007-1009No exploit	Macrovision InstallAnywhere Enterprise before 8.0.1 uses the InstallScript.iap_xml configuration file without integrity protection to verifymacrovision · installanywhere	Medium4.6	—	0.3%	Apr 19, 2007

CVE-2007-5660
48Plan
Unspecified vulnerability in the Update Service ActiveX control in isusweb.dll before 6.0.100.65101 in MacroVision FLEXnet Connect and Insta
CriticalCVSS 9.3WeaponizedEPSS 37%
- pre-auth RCE
macrovision · flexnet connectNov 2, 2007
CVE-2007-2419
42Plan
Multiple buffer overflows in an ActiveX control (boisweb.dll) in Macrovision FLEXnet Connect 6.0 and Update Service 3.x to 5.x allow remote
CriticalCVSS 10.0No exploitEPSS 6%
- pre-auth RCE
macrovision · flexnet connectJun 6, 2007
CVE-2007-0321
39Monitor
Buffer overflow in the Update Service Agent ActiveX Control in isusweb.dll for Macrovision FLEXnet Connect (formerly InstallShield Update Se
CriticalCVSS 9.3No exploitEPSS 7%
- pre-auth RCE
macrovision · flexnet connectFeb 22, 2007
CVE-2007-6654
39Monitor
Buffer overflow in a certain ActiveX control in Macrovision InstallShield Update Service Web Agent 5.1.100.47363 allows remote attackers to
CriticalCVSS 9.3Proof of conceptEPSS 6%
- pre-auth RCE
- Memory safety
macrovision · update serviceJan 4, 2008
CVE-2008-2470
39Monitor
The InstallShield Update Service Agent ActiveX control in isusweb.dll allows remote attackers to cause a denial of service (memory corruptio
CriticalCVSS 9.3No exploitEPSS 5%
- pre-auth RCE
macrovision · flexnet connectSep 18, 2008
CVE-2007-0320
39Monitor
Multiple buffer overflows in (a) an ActiveX control (iftw.dll) and (b) Netscape plug-in (npiftw32.dll) for Macrovision (formerly InstallShie
CriticalCVSS 9.3No exploitEPSS 5%
- pre-auth RCE
- Memory safety
macrovision · installfromthewebFeb 22, 2007
CVE-2007-0328
39Monitor
The DWUpdateService ActiveX control in the agent (agent.exe) in Macrovision FLEXnet Connect 6.0 and Update Service 3.x to 5.x allows remote
CriticalCVSS 9.3No exploitEPSS 5%
- pre-auth RCE
macrovision · flexnet connectMay 31, 2007
CVE-2007-5587
28Monitor
Buffer overflow in Macrovision SafeDisc secdrv.sys before 4.3.86.0, as shipped in Microsoft Windows XP SP2, XP Professional x64 and x64 SP2,
MediumCVSS 6.9Proof of conceptEPSS 3%
- Local privilege escalation
- Memory safety
microsoft · windows 2003 serverOct 19, 2007
CVE-2006-1197
28Monitor
SafeDisc installs the driver service for the secdrv.sys driver with insecure permissions, which allows local users to gain privileges by cha
HighCVSS 7.2No exploitEPSS 0%
- Local privilege escalation
macrovision · safediscMar 13, 2006
CVE-2007-1009
18Monitor
Macrovision InstallAnywhere Enterprise before 8.0.1 uses the InstallScript.iap_xml configuration file without integrity protection to verify
MediumCVSS 4.6No exploitEPSS 0%
macrovision · installanywhereApr 19, 2007