CVE-2007-5661 | BDVDB-2026-30074 Detail
Description#
The Macrovision InstallShield InstallScript One-Click Install (OCI) ActiveX control 12.0 before SP2 does not validate the DLL files that are named as parameters to the control, which allows remote attackers to download arbitrary library code onto a client machine.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://securitytracker.com/id?1019735
- http://knowledge.macrovision.com/selfservice/microsites/search.do?cmd=displayKC&externalId=Q113640
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41558
- http://www.securityfocus.com/bid/28533
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=649
- http://secunia.com/advisories/29549
- http://www.vupen.com/english/advisories/2008/1049
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.