Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2008-4587

EPSS 8.90% · P93
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2008-4587

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Insecure method vulnerability in the MSVNClientDownloadManager61Lib.DownloadManager.1 ActiveX control (ISDM.exe 6.1.100.61372) in Macrovision FLEXnet Connect 6.1 allows remote attackers to force the download and execution of arbitrary files via the AddFile and RunScheduledJobs methods. NOTE: this could be leveraged for code execution by uploading executable files to Startup folders.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Macrovision FLEXnet Connect ActiveX AddFile和RunScheduledJobs方法下载漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Macrovision FLEXnet Connect是一种应用软件的厂商为用户提供产品相关的更新及信息发布的工具。 没有正确地验证一些函数的输入参数，如果用户受骗访问了恶意网页的话，就可能在用户不知情的情况下向系统下载任意文件，利用AddFile和RunScheduledJobs方法.
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2008-4587

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2008-4587

Please Login to view more intelligence information

Same Patch Batch · n/a · 2008-10-15 · 42 CVEs total

CVE-2008-3474Microsoft IE信息泄露漏洞
CVE-2008-4574Ayco Okul Portali 'default.asp' SQL注入漏洞
CVE-2008-1446Microsoft Windows Internet打印服务整数溢出漏洞
CVE-2008-2250Microsoft Windows多个内核权限提升漏洞
CVE-2008-2251Microsoft Windows多个内核权限提升漏洞
CVE-2008-2252Microsoft Windows多个内核权限提升漏洞
CVE-2008-3464Microsoft Windows AFD驱动本地权限提升漏洞
CVE-2008-3466Microsoft Host Integration Server RPC远程命令执行漏洞
CVE-2008-3471Microsoft Excel BIFF文件格式解析栈溢出漏洞
CVE-2008-3472Microsoft IE权限许可和访问控制漏洞
CVE-2008-3473Microsoft IE多个跨域信息泄露和内存破坏漏洞
CVE-2008-4573MunzurSoft Wep Portal 'kategori.asp' SQL注入漏洞
CVE-2008-3475Microsoft IE componentFromPoint内存破坏漏洞
CVE-2008-3476Microsoft IE多个跨域信息泄露和内存破坏漏洞
CVE-2008-3477Microsoft Excel日历对象验证远程代码执行漏洞
CVE-2008-3479Microsoft Windows消息队列服务RPC查询堆溢出漏洞
CVE-2008-4019Microsoft Excel公式解析整数溢出漏洞
CVE-2008-4020Microsoft Office CDO协议跨站脚本漏洞
CVE-2008-4023Microsoft Windows活动目录LDAP请求缓冲区溢出漏洞
CVE-2008-4036Microsoft Windows VAD本地权限提升漏洞

Showing top 20 of 42 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2008-4587

No comments yet

Leave a comment