PT-2012-1260

CVE-2007-6744

·

Published

2012-01-19

·

Updated

2012-01-20

Description by

CVSS 2.0
2.1
Low
MetricsAV:L/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions Flexera Macrovision InstallShield versions prior to 2008
Description The issue involves an incorrect interaction between InstallShield and Signcode.exe, potentially allowing local users to obtain sensitive information. This occurs during certain digital-signature operations involving .spc and .pvk files, where a digital-signature password is sent to an unintended application.
Recommendations For Flexera Macrovision InstallShield versions prior to 2008, update to version 2008 or later to resolve the issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Related identifiers
CVE-2007-6744
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com