VULNERABILITY INTELLIGENCE

CVE-2008-2470

CVSS score9.3 HIGH

EPSS probability5.48%

CISA KEVNot currently listed

Published2008-09-18

Last modified2026-06-16

CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

The InstallShield Update Service Agent ActiveX control in isusweb.dll allows remote attackers to cause a denial of service (memory corruption and browser crash) and possibly execute arbitrary code via a call to ExecuteRemote with a URL that results in a 404 error response.

Primary references

cret@cert.org — Patch
cret@cert.org — Third Party Advisory, US Government Resource
cret@cert.org — Third Party Advisory, VDB Entry
cret@cert.org — Permissions Required, Third Party Advisory
cret@cert.org — VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Patch
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Permissions Required, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — VDB Entry