CVE-2008-4587 in the critical feed json
Insecure method vulnerability in the MSVNClientDownloadManager61Lib.DownloadManager.1 ActiveX control (ISDM.exe 6.1.100.61372) in Macrovisi…
published 2008-10-15 18 y ago modified 2026-06-16 4 mo ago also EUVD-2008-4567
- cvss
- 9.3
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 10.5%
- EPSS 10.5% chance of exploitation in 30 days, percentile 95%
- public exploits
- 1
- Exploit-DB
Summary
Insecure method vulnerability in the MSVNClientDownloadManager61Lib.DownloadManager.1 ActiveX control (ISDM.exe 6.1.100.61372) in Macrovision FLEXnet Connect 6.1 allows remote attackers to force the download and execution of arbitrary files via the AddFile and RunScheduledJobs methods. NOTE: this could be leveraged for code execution by uploading executable files to Startup folders.
Timeline
- First public exploit (EDB-4909)
- Published
Exploit prediction
10.51% chance of exploitation in the next 30 days, higher than 95% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- EDB-4909 Macrovision FlexNet DownloadManager - Insecure Methods remote, 2008-01-14
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 9.3 | AV:N/AC:M/Au:N/C:C/I:C/A:C |
References
-
exploit-db.com
/exploits/4909
exploit
-
secunia.com
/advisories/28496
third-party-advisory, vendor-advisory
-
vupen.com
/english/advisories/2008/0145
vdb-entry
-
exchange.xforce.ibmcloud.com
/vulnerabilities/39653
vdb-entry
-
securityfocus.com
/bid/27279
vdb-entry
-
securityreason.com
/securityalert/4428
third-party-advisory
Sources
- CVE List CVE-2008-4587
- NVD CVE-2008-4587
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.