CVE-2008-2470: Critical severity flexnet connect vulnerability

Published Sep 18, 2008

Updated

The InstallShield Update Service Agent ActiveX control in isusweb.dll allows remote attackers to cause a denial of service (memory corruption and browser crash) and possibly execute arbitrary code via a call to ExecuteRemote with a URL that results in a 404 error response.

Affected Software

1 affected component

Macrovision FLEXnet Connect=6.0

Remediation

Patch Available

http://support.installshield.com/kb/view.asp?articleid=Q113020

Event History

Sep 18, 2008

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-2470?

CVE-2008-2470 is considered to have a high severity due to its ability to cause denial of service and potential arbitrary code execution.

How do I fix CVE-2008-2470?

To fix CVE-2008-2470, update the affected Macrovision FLEXnet Connect software to the latest version provided by the vendor.

Which software is affected by CVE-2008-2470?

CVE-2008-2470 affects Macrovision FLEXnet Connect version 6.0.

What type of attack does CVE-2008-2470 enable?

CVE-2008-2470 enables remote attackers to execute a denial of service attack and possibly execute arbitrary code via malicious URLs.

How can CVE-2008-2470 impact users?

Users affected by CVE-2008-2470 may experience browser crashes and could potentially fall victim to remote code execution attacks.