Macrovision preparing end-user patch for FLEXnet Connect/Update Service security issues

Updated information about the recent security vulnerability reports in Macrovision's FLEXnet Connect and InstallShield Update Service products: Product manager Trent Wheeler told me they are currently in the process of rolling out the fix for the two problems reported by US-CERT to customers of InstallShield, AdminStudio, and other Macrovision products that utilize the FLEXnet Connect product. 

And they are writing an additional patch, one that is appropriate for end-users of FLEXnet Connect to apply directly to the installed version of the agent rather than the intermediate consumers of the SDK. This will be made generally available to customers of Macrovision's products that utilize FLEXnet Connect, and to interested 3rd parties, as soon as it clears QA.

Related articles:

Published Thu, Jun 21 2007 21:32 by stefan
Filed under: , , ,

Comments

# re: Macrovision preparing end-user patch for FLEXnet Connect/Update Service security issues

From the discussions I've seen on most internet message boards, most users would be happier if they just shipped an uninstaller.

I understand the need for a common updater that ISV's can subscribe to, but Macrovision really takes a beating from the masses on this one.

Thursday, June 21, 2007 4:00 PM by Christopher Painter

# Macrovision preparing end-user patch for FLEXnet Connect/Update Service security issues

View article...

Friday, June 22, 2007 5:18 AM by Rod Trent at myITforum.com

# re: Macrovision preparing end-user patch for FLEXnet Connect/Update Service security issues

Seriously, I would love to get rid of this POS off all my machines.

Tuesday, June 26, 2007 1:50 PM by AJ

# re: Macrovision preparing end-user patch for FLEXnet Connect/Update Service security issues

In regards to my earlier comment:

consumer.installshield.com/kb.asp

Tuesday, June 26, 2007 1:51 PM by AJ