CVE-2008-4587

EPSS 10.5%

Insecure method vulnerability in the MSVNClientDownloadManager61Lib.DownloadManager.1 ActiveX control (ISDM.exe 6.1.100.61372) in Macrovision FLEXnet Connect 6.1 allows remote attackers to force the download and execution of arbitrary files via the AddFile and RunScheduledJobs methods. NOTE: this could be leveraged for code execution by uploading executable files to Startup folders.

Produtos afetados

n/a · n/a

PoCs públicas encontradas — 1

cve_referencewww.exploit-db.com/exploits/4909não verificado

⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

http://secunia.com/advisories/28496 http://securityreason.com/securityalert/4428 https://exchange.xforce.ibmcloud.com/vulnerabilities/39653 https://www.exploit-db.com/exploits/4909 http://www.securityfocus.com/bid/27279 http://www.vupen.com/english/advisories/2008/0145