VULNERABILITY INTELLIGENCE
CVE-2007-6654
CVSS score9.3 HIGH
EPSS probability5.55%
CISA KEVNot currently listed
Published2008-01-04
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C
Description
Buffer overflow in a certain ActiveX control in Macrovision InstallShield Update Service Web Agent 5.1.100.47363 allows remote attackers to execute arbitrary code via a long string in the ProductCode argument (second argument) to the DownloadAndExecute method, a different vulnerability than CVE-2007-0321, CVE-2007-2419, and CVE-2007-5660.
Weakness classification
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer