CVE-2007-5660 in the critical feed json
Unspecified vulnerability in the Update Service ActiveX control in isusweb.dll before 6.0.100.65101 in MacroVision FLEXnet Connect and Inst…
published 2007-11-02 19 y ago modified 2026-06-16 4 mo ago also EUVD-2007-5632
- cvss
- 9.3
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 36.6%
- EPSS 36.6% chance of exploitation in 30 days, percentile 98%
- public exploits
- 4
- Metasploit, Exploit-DB
Summary
Unspecified vulnerability in the Update Service ActiveX control in isusweb.dll before 6.0.100.65101 in MacroVision FLEXnet Connect and InstallShield 2008 allows remote attackers to execute arbitrary code via an unspecified "unsafe method," possibly involving a buffer overflow.
Patch / fix
Timeline
- First public exploit (Metasploit exploit/windows/browser/macrovision_unsafe)
- Published
Exploit prediction
36.62% chance of exploitation in the next 30 days, higher than 98% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- Metasploit exploit/windows/browser/macrovision_downloadandexecute Macrovision InstallShield Update Service Buffer Overflow metasploit exploit, normal rank, 2007-10-31
- Metasploit exploit/windows/browser/macrovision_unsafe Macrovision InstallShield Update Service ActiveX Unsafe Method metasploit exploit, excellent rank, 2007-10-20
- EDB-16602 Macrovision Installshield Update Service - ActiveX Unsafe Method (Metasploit) remote, 2010-09-20
- EDB-16573 Macrovision Installshield Update Service - Remote Buffer Overflow (Metasploit) remote, 2010-05-09
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 9.3 | AV:N/AC:M/Au:N/C:C/I:C/A:C |
References
-
support.installshield.com
/kb/view.asp?articleid=Q113020
patch
-
secunia.com
/advisories/27475
third-party-advisory, patch, vendor-advisory
-
macrovision.com
/promolanding/7660.htm
patch
-
securityfocus.com
/bid/26280
vdb-entry, patch
-
support.installshield.com
/kb/view.asp?articleid=Q113602
patch
-
labs.idefense.com
/intelligence/vulnerabilities/display.php?id=618
third-party-advisory
-
osvdb.org
/38347
vdb-entry
-
vupen.com
/english/advisories/2007/3670
vdb-entry
-
securitytracker.com
/id?1018881
vdb-entry
-
exchange.xforce.ibmcloud.com
/vulnerabilities/38210
vdb-entry
Sources
- CVE List CVE-2007-5660
- NVD CVE-2007-5660
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.