CVE-2007-0328: Macrovision Flexnet Connect

High severity, CVSS 9.3. EPSS: 5.3% chance of exploitation in the next 30 days.

The DWUpdateService ActiveX control in the agent (agent.exe) in Macrovision FLEXnet Connect 6.0 and Update Service 3.x to 5.x allows remote attackers to execute arbitrary commands via (1) the Execute method, and obtain the exit status using (2) the GetExitCode method.

Affected products

• Macrovision Flexnet Connect: version 6.0 only
• Macrovision Update Service: version 3.0 only; version 4.0 only; version 5.0 only

Published 2007-06-01. Last modified 2026-06-16.