CVE-2007-1009 | BDVDB-2026-23617 Detail

Description#

Macrovision InstallAnywhere Enterprise before 8.0.1 uses the InstallScript.iap_xml configuration file without integrity protection to verify authorization for installing an application, which allows local users to perform unauthorized installations by removing the (1) password or (2) serial number verification sections from this file.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://securityreason.com/securityalert/2596
http://www.vupen.com/english/advisories/2007/1433
http://www.securityfocus.com/archive/1/466035/100/0/threaded
http://www.symantec.com/content/en/us/enterprise/research/SYMSA-2007-003.txt
http://www.securityfocus.com/bid/22643

Exploit#

No public exploit known

History#

Version 12007-04-19Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.