ID CVE-2008-4586
Summary Insecure method vulnerability in the MVSNCLientWebAgent61.WebAgent.1 ActiveX control (isusweb.dll 6.1.100.61372) in Macrovision FLEXnet Connect 6.1 allows remote attackers to force the download and execution of arbitrary files via the DownloadAndExecute method.
References
Vulnerable Configurations
  • cpe:2.3:a:acresso:flexnet_connect:6.1:*:*:*:*:*:*:*
    cpe:2.3:a:acresso:flexnet_connect:6.1:*:*:*:*:*:*:*
CVSS
Base: 9.3 (as of 29-09-2017 - 01:32)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:N/AC:M/Au:N/C:C/I:C/A:C
refmap via4
bid 27279
exploit-db 4913
secunia 28496
sreason 4425
vupen ADV-2008-0145
Last major update 29-09-2017 - 01:32
Published 15-10-2008 - 22:45
Last modified 29-09-2017 - 01:32
Back to Top