Elazar Broad has discovered some vulnerabilities in Macrovision FLEXnet Connect, which can be exploited by malicious people to overwrite arbitrary files and compromise a user's system.

1) The MSVNClientDownloadManager61Lib.DownloadManager.1 ActiveX control (ISDM.exe) including certain insecure methods (e.g. "AddFile()", "RunScheduledJobs()"), which can be exploited to e.g. download an arbitrary file to an arbitrary location on a user's system.

The isusweb.dll ActiveX control is also reported to be similarly affected.

2) The MVSNCLientWebAgent61.WebAgent.1 ActiveX control (isusweb.dll) includes the insecure "DownloadAndExecute()" method, which can be exploited to download and execute an arbitrary program.

The vulnerabilities are confirmed in version 6.1 (ISDM.exe/isusweb.dll version 6.1.100.61372). Other versions may also be affected.

Solution
Set the kill-bit for the affected ActiveX controls.

Provided and/or discovered by
Elazar Broad

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059602.html
http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059627.html

Alternate/detailed remediation
Further details available in Customer Area

Deep Links
Links available to Secunia VIM customers