CVE-2007-6744: Infoleak
Flexera Macrovision InstallShield before 2008 sends a digital-signature password to an unintended application during certain signature operations involving .spc and .pvk files, which might allow local users to obtain sensitive information via unspecified vectors, related to an incorrect interaction between InstallShield and Signcode.exe.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-6744?
CVE-2007-6744 has a moderate severity rating due to potential unauthorized access to sensitive information.
How do I fix CVE-2007-6744?
To mitigate CVE-2007-6744, upgrade to a version of InstallShield that is not affected, preferably InstallShield 2008 or later.
What versions of InstallShield are affected by CVE-2007-6744?
CVE-2007-6744 affects InstallShield versions prior to 2008, including versions 10.5, 11, 11.5, and earlier.
What type of information can be exposed due to CVE-2007-6744?
CVE-2007-6744 may expose digital-signature passwords, potentially compromising sensitive application data.
Can local users exploit CVE-2007-6744 easily?
Yes, local users may exploit CVE-2007-6744 using unspecified vectors to obtain sensitive information.