Browse Blog Posts by Tags

All Tags » Security » FLEXnet Connect (RSS)

Browse Blog Posts by Tags

Showing related tags and posts for the Blogs application. See all tags in the site

FLEXnet Connect 6.1 Security Update

Acresso has published a fix for a security issue in FLEXnet Connect (previously called InstallShield Update Service) that was reported in September 2008. The problem was that FLEXnet connect used an unauthenticated HTTP connection to download and execute scripts from the update server. Therefore an attacker...

Posted to InstallSite Blog by stefan on Mon, Feb 16 2009
Filed under: Filed under: Industry News, Security, FLEXnet Connect, Acresso
Security Vulnerability in FLEXnet Connect / InstallShield Update Service

When checking for updates, the FLEXnet Connect client (and it's previous versions named InstallShield Update Service) can download and execute scripts from the update server. The problem is that these scripts are downloaded via HTTP, so the identity of the server isn't verified and the scripts...

Posted to InstallSite Blog by stefan on Thu, Sep 18 2008
Filed under: Filed under: Industry News, Security, Macrovision, FLEXnet Connect, Acresso
New Security Vulnerability in FLEXnet Connect

New reports about security vulnerabilities in Macrovision's FLEXnet Connect (formerly called InstallShield Update Service) have been published on January 15, 2007 2008. The vulnerability would enable an attacker to remotely run malicious code on a users machine. The following files are affected:...

Posted to InstallSite Blog by stefan on Sun, Jan 20 2008
Filed under: Filed under: Web Resources, Industry News, Security, Macrovision, FLEXnet Connect
More on the security patch for FLEXnet Connect

Some additional information about the recently reported security vulnerability in FLEXnet Connect: According to Secunia the vulnerability is reported in versions 5.01.100.47363 and 6.0.100.60146 of the Update Service ActiveX control (isusweb.dll), but other versions may also be affected. It is recommended...

Posted to InstallSite Blog by stefan on Fri, Nov 2 2007
Filed under: Filed under: Web Resources, Industry News, Security, Macrovision, FLEXnet Connect
Security patch for FLEXnet Connect

Today, Macrovision Corp. notified customers of FLEXnet Connect® (formerly called InstallShield Update Service) of a security vulnerability in the FLEXnet Connect client version 6.0. Customers using the FLEXnet Connect functionality that is bundled with some editions of InstallShield and AdminStudio are...

Posted to InstallSite Blog by stefan on Tue, Oct 30 2007
Filed under: Filed under: Web Resources, Industry News, Security, Macrovision, FLEXnet Connect
Macrovision preparing end-user patch for FLEXnet Connect/Update Service security issues

Updated information about the recent security vulnerability reports in Macrovision's FLEXnet Connect and InstallShield Update Service products: Product manager Trent Wheeler told me they are currently in the process of rolling out the fix for the two problems reported by US-CERT to customers of InstallShield...

Posted to InstallSite Blog by stefan on Thu, Jun 21 2007
Filed under: Filed under: Industry News, Security, Macrovision, FLEXnet Connect
Doubts about yet another FLEXnet Connect/InstallShield Update Service vulnerability report

On June 4th TippingPoint, a provider of network-based intrusion prevention systems, reported a new buffer overflow vulnerability that affects Macrovision FLEXnet Connect version 6 and InstallShield Update Service versions 3-5. TippingPoint Vulnerability Report What puzzles me is the CLSID of the vulnerable...

Posted to InstallSite Blog by stefan on Wed, Jun 6 2007
Filed under: Filed under: Industry News, Security, Macrovision, FLEXnet Connect
Update on the FLEXnet Connect/InstallShield Update Service vulnerability

While doing some research on the security vulnerability in FLEXnet Connect and InstallShield Update Service I checked several versions of the agent.exe redistributable and it seems that it's using different CLSIDs in each release. The US-CERT advisory recommends setting the kill-bit for the control...

Posted to InstallSite Blog by stefan on Sat, Jun 2 2007
Filed under: Filed under: Industry News, Security, Macrovision, FLEXnet Connect
Security vulnerability in FLEXnet Connect/InstallShield Update Service end user ActiveX control (reported May 31, 2007)

The United States Computer Emergency Readiness Team (US-CERT) reports a newly found security vulnerability in Macrovision's FLEXnet Connect. It also affects end user machines where the update agent has been installed, which many setups created with InstallShield do by default. FLEXnet Connect includes...

Posted to InstallSite Blog by stefan on Fri, Jun 1 2007
Filed under: Filed under: Industry News, Security, Macrovision, FLEXnet Connect
Security Vulnerabilities in InstallShield Runtime Files on End User Machines

The United States Computer Emergency Readiness Team (US-CERT) reported critical security vulnerabilities in two ActiveX controls and a Netscape plug-in that InstallShield/Macrovision products install on end user machines. According to the reports the vulnerabilities can be exploited execute arbitrary...

Posted to InstallSite Blog by stefan on Mon, Mar 5 2007
Filed under: Filed under: Industry News, Security, Macrovision, FLEXnet Connect

Page 1 of 1 (10 items)

Questions? Contact Susan at Susan-at-msmvps.com. Each post's copyright held by the original author. All rights reserved. Blog site is an independent site not sponsored by Microsoft.
Our servers would like to thank www.ownwebnow.com and www.exchangedefender.com. We wouldn't be here without the generosity of Vlad Mazek and his companies.

Powered by Community Server (Commercial Edition), by Telligent Systems

Theme based on the Paperclip Blog Theme included in Community Server.
Enhanced to a Site-Wide Theme by Interscape Technologies.

Recent Posts

Tags

Browse Blog Posts by Tags