VULNERABILITY INTELLIGENCE
CVE-2007-0328
CVSS score9.3 HIGH
EPSS probability5.27%
CISA KEVNot currently listed
Published2007-06-01
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C
Description
The DWUpdateService ActiveX control in the agent (agent.exe) in Macrovision FLEXnet Connect 6.0 and Update Service 3.x to 5.x allows remote attackers to execute arbitrary commands via (1) the Execute method, and obtain the exit status using (2) the GetExitCode method.
Primary references
- cret@cert.org
- cret@cert.org — Vendor Advisory
- cret@cert.org — Vendor Advisory
- cret@cert.org — Patch
- cret@cert.org
- cret@cert.org — Patch, US Government Resource
- cret@cert.org — Vendor Advisory
- cret@cert.org — Vendor Advisory
- cret@cert.org
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory