Browse by Tags

All Tags » FLEXnet Connect » Macrovision (RSS)
Thursday, September 18, 2008 9:10 AM

Security Vulnerability in FLEXnet Connect / InstallShield Update Service

When checking for updates, the FLEXnet Connect client (and it's previous versions named InstallShield Update Service) can download and execute scripts from the update server. The problem is that these scripts are downloaded via HTTP, so the identity...
Posted by stefan | 1 comment(s)
Filed under: , , , ,
Sunday, January 20, 2008 1:23 PM

New Security Vulnerability in FLEXnet Connect

New reports about security vulnerabilities in Macrovision's FLEXnet Connect (formerly called InstallShield Update Service) have been published on January 15, 2007 2008. The vulnerability would enable an attacker to remotely run malicious code on a...
Posted by stefan | with no comments
Filed under: , , , ,
Friday, November 02, 2007 1:18 PM

More on the security patch for FLEXnet Connect

Some additional information about the recently reported security vulnerability in FLEXnet Connect: According to Secunia the vulnerability is reported in versions 5.01.100.47363 and 6.0.100.60146 of the Update Service ActiveX control (isusweb.dll), but...
Posted by stefan | with no comments
Filed under: , , , ,
Tuesday, October 30, 2007 7:00 PM

Security patch for FLEXnet Connect

Today, Macrovision Corp. notified customers of FLEXnet Connect® (formerly called InstallShield Update Service) of a security vulnerability in the FLEXnet Connect client version 6.0. Customers using the FLEXnet Connect functionality that is bundled with...
Posted by stefan | 1 comment(s)
Filed under: , , , ,
Thursday, June 21, 2007 9:32 PM

Macrovision preparing end-user patch for FLEXnet Connect/Update Service security issues

Updated information about the recent security vulnerability reports in Macrovision's FLEXnet Connect and InstallShield Update Service products: Product manager Trent Wheeler told me they are currently in the process of rolling out the fix for the...
Posted by stefan | 4 comment(s)
Filed under: , , ,
Wednesday, June 06, 2007 11:58 AM

Doubts about yet another FLEXnet Connect/InstallShield Update Service vulnerability report

On June 4th TippingPoint, a provider of network-based intrusion prevention systems, reported a new buffer overflow vulnerability that affects Macrovision FLEXnet Connect version 6 and InstallShield Update Service versions 3-5. TippingPoint Vulnerability...
Posted by stefan | 6 comment(s)
Filed under: , , ,
Saturday, June 02, 2007 2:46 PM

Update on the FLEXnet Connect/InstallShield Update Service vulnerability

While doing some research on the security vulnerability in FLEXnet Connect and InstallShield Update Service I checked several versions of the agent.exe redistributable and it seems that it's using different CLSIDs in each release. The US-CERT advisory...
Posted by stefan | 4 comment(s)
Filed under: , , ,
Friday, June 01, 2007 2:53 PM

Security vulnerability in FLEXnet Connect/InstallShield Update Service end user ActiveX control (reported May 31, 2007)

The United States Computer Emergency Readiness Team (US-CERT) reports a newly found security vulnerability in Macrovision's FLEXnet Connect. It also affects end user machines where the update agent has been installed, which many setups created with...
Posted by stefan | 4 comment(s)
Filed under: , , ,
Monday, March 05, 2007 6:55 PM

Security Vulnerabilities in InstallShield Runtime Files on End User Machines

The United States Computer Emergency Readiness Team (US-CERT) reported critical security vulnerabilities in two ActiveX controls and a Netscape plug-in that InstallShield/Macrovision products install on end user machines. According to the reports the...
Posted by stefan | with no comments
Filed under: , , ,