| Package | Affected versions | Patched versions |
|---|---|---|
| flexnet connect | = 6.0 | |
| update service | = 3.0= 4.0= 5.0 |
Multiple buffer overflows in an ActiveX control (boisweb.dll) in Macrovision FLEXnet Connect 6.0 and Update Service 3.x to 5.x allow remote attackers to execute arbitrary code via the (1) the second parameter to the DownloadAndExecute method and (2) third parameter to the AddFileEx method, a different vulnerability than CVE-2007-0328.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free