vulnwire
9.3crit

CVE-2008-4587in critical feed1 exploit

Insecure method vulnerability in the MSVNClientDownloadManager61Lib.DownloadManager.1 ActiveX control (ISDM.exe 6.1.100.61372) in Macrovisi…

Published 18 y ago · modified 4 mo ago · JSON

CVSS
9.3
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
10.5%
percentile 96%
Public exploits
1
Exploit-DB

Insecure method vulnerability in the MSVNClientDownloadManager61Lib.DownloadManager.1 ActiveX control (ISDM.exe 6.1.100.61372) in Macrovision FLEXnet Connect 6.1 allows remote attackers to force the download and execution of arbitrary files via the AddFile and RunScheduledJobs methods. NOTE: this could be leveraged for code execution by uploading executable files to Startup folders.

Exploit prediction (EPSS)

10.51% probability of exploitation in the next 30 days, higher than 96% of all scored CVEs.

Exploits and detections

  • EDB-4909 Macrovision FlexNet DownloadManager - Insecure Methods · remote · 2008-01-14

CVSS scores

Assigned byVersionScoreVector
NVD2.09.3AV:N/AC:M/Au:N/C:C/I:C/A:C

References

  • vupen.com /english/advisories/2008/0145 · vdb-entry, x_refsource_VUPEN, x_transferred
  • secunia.com /advisories/28496 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/39653 · vdb-entry, x_refsource_XF, x_transferred
  • securityfocus.com /bid/27279 · vdb-entry, x_refsource_BID, x_transferred
  • exploit-db.com /exploits/4909 · exploit, x_refsource_EXPLOIT-DB, x_transferred
  • securityreason.com /securityalert/4428 · third-party-advisory, x_refsource_SREASON, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.