{"id":"CVE-2008-4586","aliases":["EUVD-2008-4566","GHSA-4w98-jrjp-j9f4"],"status":"published","title":"Insecure method vulnerability in the MVSNCLientWebAgent61.WebAgent.1 ActiveX control (isusweb.dll...","description":"Insecure method vulnerability in the MVSNCLientWebAgent61.WebAgent.1 ActiveX control (isusweb.dll 6.1.100.61372) in Macrovision FLEXnet Connect 6.1 allows remote attackers to force the download and execution of arbitrary files via the DownloadAndExecute method.","severity":{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.05165,"percentile":0.92489,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2008-10-15T22:00:00Z","modified":"2026-06-16T22:58:07Z","exploits":[{"source":"exploitdb","id":"EDB-4913","title":"Macrovision FlexNet - 'isusweb.dll' DownloadAndExecute Method","type":"remote","platform":"windows","date":"2008-01-15","verified":true,"url":"https://www.exploit-db.com/exploits/4913"}],"products":[{"vendor":"acresso","product":"flexnet_connect"}],"references":[{"url":"https://www.exploit-db.com/exploits/4913","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"]},{"url":"http://securityreason.com/securityalert/4425","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2008/0145","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"http://secunia.com/advisories/28496","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27279","tags":["vdb-entry","x_refsource_BID","x_transferred","Exploit"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-4586"},{"url":"https://github.com/advisories/GHSA-4w98-jrjp-j9f4"}],"sources":{"cve":[{"id":"CVE-2008-4586","description":"Insecure method vulnerability in the MVSNCLientWebAgent61.WebAgent.1 ActiveX control (isusweb.dll 6.1.100.61372) in Macrovision FLEXnet Connect 6.1 allows remote attackers to force the download and execution of arbitrary files via the DownloadAndExecute method.","status":"published","published":"2008-10-15T22:00:00Z","modified":"2024-08-07T10:24:20.504Z","updated_at":"2026-11-02T14:34:46.950176Z"}],"euvd":[{"id":"EUVD-2008-4566","description":"Insecure method vulnerability in the MVSNCLientWebAgent61.WebAgent.1 ActiveX control (isusweb.dll 6.1.100.61372) in Macrovision FLEXnet Connect 6.1 allows remote attackers to force the download and execution of arbitrary files via the DownloadAndExecute method.","status":"published","published":"2008-10-15T22:00:00Z","modified":"2024-08-07T10:24:20Z","updated_at":"2026-11-03T01:38:46.801182Z"}],"ghsa":[{"id":"GHSA-4w98-jrjp-j9f4","title":"Insecure method vulnerability in the MVSNCLientWebAgent61.WebAgent.1 ActiveX control (isusweb.dll...","description":"Insecure method vulnerability in the MVSNCLientWebAgent61.WebAgent.1 ActiveX control (isusweb.dll 6.1.100.61372) in Macrovision FLEXnet Connect 6.1 allows remote attackers to force the download and execution of arbitrary files via the DownloadAndExecute method.","status":"published","published":"2022-05-02T00:11:33Z","modified":"2023-01-31T05:06:58Z","updated_at":"2026-11-02T14:49:07.796746Z"}],"nvd":[{"id":"CVE-2008-4586","description":"Insecure method vulnerability in the MVSNCLientWebAgent61.WebAgent.1 ActiveX control (isusweb.dll 6.1.100.61372) in Macrovision FLEXnet Connect 6.1 allows remote attackers to force the download and execution of arbitrary files via the DownloadAndExecute method.","status":"published","published":"2008-10-15T22:45:31.273Z","modified":"2026-06-16T22:58:07.263Z","cvss":[{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:01:29.223028Z"}]}}