Unscored severity · published Apr 4, 2008
CVE-2007-5661
The Macrovision InstallShield InstallScript One-Click Install (OCI) ActiveX control 12.0 before SP2 does not validate the DLL files that are named as parameters to the control,…
–
CVSS
2.2%
EPSS
No
On KEV
Description
The Macrovision InstallShield InstallScript One-Click Install (OCI) ActiveX control 12.0 before SP2 does not validate the DLL files that are named as parameters to the control, which allows remote attackers to download arbitrary library code onto a client machine.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.2% · higher than 83% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IN
Installshield · Revenera
before 12; before 12; 12; 12; 12; 12 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-5661
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-5661
Patch
http://knowledge.macrovision.com/selfservice/microsites/search.do?cmd=displayKC&externalId=Q113640
Not Applicable
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=649
Patch
http://secunia.com/advisories/29549
Not Applicable
http://securitytracker.com/id?1019735
Patch
http://www.securityfocus.com/bid/28533
Not Applicable
http://www.vupen.com/english/advisories/2008/1049
More from Installshield
8.5
CVE-2023-29080
Privilege escalation in InstallShield
7.3
CVE-2024-14012
Potential Privilege Escalation in Revenera InstallShield 2023 R1
7.3
CVE-2024-7562
A potential elevated privilege issue has been reported with InstallShield built Standalone MSI setups having multiple InstallScript custom actions configured
5.6
CVE-2025-12418
Potential Denial of Service in Supported Versions of Revenera InstallShield
5.5
CVE-2023-29081
InstallShield Symlink Vulnerability Affecting Suite Project Setups