CVE-2007-6744

Published: Jan 19, 2012Modified: Apr 29, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

Flexera Macrovision InstallShield before 2008 sends a digital-signature password to an unintended application during certain signature operations involving .spc and .pvk files, which might allow local users to obtain sensitive information via unspecified vectors, related to an incorrect interaction between InstallShield and Signcode.exe.

Affected (7)

Products: Flexerasoftware: Installshield

Flexerasoftware

1 product

Installshield

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Flexerasoftware Installshield	Up to 1.0
Flexerasoftware Installshield	Up to 12
Flexerasoftware Installshield	Up to 2.0
Flexerasoftware Installshield	Up to 3.0
Flexerasoftware Installshield	Version 10.5
Flexerasoftware Installshield	Version 11.5
Flexerasoftware Installshield	Version 11

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

http://kb.flexerasoftware.com/selfservice/microsites/search.do?cmd=displayKC&docType=kc&externalId=Installation-InstallShield-InstallShield2008Premier-Public-ProductInfo-IS2008PremProReleaseNotes2pdf&sliceId=pdfPage_42

Source: cve@mitre.org

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.