Macrovision InstallShield InstallScript One-Click Install ActiveX Control Code Execution - Advisories

Software Inspectors

	Scan Online

	Personal (PSI)

	Network (NSI 2.0) - NEW -

Solutions For

	Security Professionals

	Security Vendors

Free Solutions For

	Open Communities

	Journalists & Media

Secunia Advisories

	Search

	Historic Advisories

	Listed By Product

	Listed By Vendor

	Statistics / Graphs

	Secunia Research

	Report Vulnerability

	About Advisories

Virus Information

	Chronological List

	Last 10 Virus Alerts

	About Virus Information

Secunia Customers

	Customer Area

Macrovision InstallShield InstallScript One-Click Install ActiveX Control Code Execution

Secunia Advisory:	SA29549
Release Date:	2008-04-01

Critical:	Highly critical
Impact:	System access
Where:	From remote
Solution Status:	Vendor Patch

Software:	Macrovision InstallShield

CVE reference:	CVE-2007-5661 (Secunia mirror)

	Want to know the next time vulnerabilities are fixed in this product? - Companies can be alerted via email and SMS!

Description: A vulnerability has been reported in Macrovision InstallShield, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to an error in the One-Click Install ActiveX control for InstallScript projects and can be exploited to e.g. download and load malicious libraries when a user is tricked into visiting a malicious website. The vulnerability reportedly affects InstallShield 12 only. Solution: Install Service Pack 2, apply patches, rebuild, and update HTML files (see vendor's advisory for details). Patch for InstallShield 12 SP2 English: http://saturn.installshield.com/is/12/windows/domestic/sp2/OCIHotFix/Update.exe Patch for InstallShield 12 SP2 German: http://saturn.installshield.com/is/12/windows/german/sp2/OCIHotFix/Update.exe Patch for InstallShield 12 SP2 Japanese: http://saturn.installshield.com/is/12/windows/japanese/sp2/OCIHotFix/Update.exe Set the kill-bit for the affected ActiveX control. Provided and/or discovered by: Discovered by an anonymous researcher and reported via iDefense Labs. Original Advisory: Macrovision: http://knowledge.macrovision.com/self...?cmd=displayKC&externalId=Q113640 iDefense Labs: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=649 Extended Solution: The "Extended Solution" section is available for Secunia customers only. Request a trial and get access to the Secunia Customer Area and Extended Secunia advisories.



Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise. Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

1 Related Secunia Security Advisories

1. Macrovision Products Update Service ActiveX Control Vulnerabilities

Send Feedback to Secunia

If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com. Ideas, suggestions, and other feedback are most welcome.

Secunia PSI
Scan | Patch | Track
Free Download

Secunia Poll

Most Popular Advisories

1.	Yahoo! Assistant yNotifier.dll ActiveX Control Code Execution

2.	Cyberfolio "rep" File Inclusion Vulnerability

3.	Zarafa Script Insertion Vulnerabilities

4.	InfoBiz Server "keywords" Cross-Site Scripting Vulnerability

5.	OpenKM Document Export Security Issue

6.	vShare YouTube Clone "tid" SQL Injection Vulnerability

7.	SazCart Multiple File Inclusion Vulnerabilities

8.	TFTP Server SP Long Error Message Buffer Overflow

9.	Slackware update for thunderbird

10.	Ubuntu update for vorbis-tools