CVE-2007-1009

Published: Apr 19, 2007Modified: Apr 23, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

Macrovision InstallAnywhere Enterprise before 8.0.1 uses the InstallScript.iap_xml configuration file without integrity protection to verify authorization for installing an application, which allows local users to perform unauthorized installations by removing the (1) password or (2) serial number verification sections from this file.

Affected (2)

Products: Macrovision: Installanywhere

1 product

Installanywhere

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Macrovision Installanywhere	Version 8
Macrovision Installanywhere	Version 8

References (10)

http://securityreason.com/securityalert/2596

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/466035/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/22643

Source: cve@mitre.org

Patch

http://www.symantec.com/content/en/us/enterprise/research/SYMSA-2007-003.txt

Source: cve@mitre.org

Vendor Advisory

http://www.vupen.com/english/advisories/2007/1433

Source: cve@mitre.org

http://securityreason.com/securityalert/2596

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/466035/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/22643

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.symantec.com/content/en/us/enterprise/research/SYMSA-2007-003.txt

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.vupen.com/english/advisories/2007/1433

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.