CVE-2007-2419: Macrovision Flexnet Connect

High severity, CVSS 10.0. EPSS: 5.5% chance of exploitation in the next 30 days.

Multiple buffer overflows in an ActiveX control (boisweb.dll) in Macrovision FLEXnet Connect 6.0 and Update Service 3.x to 5.x allow remote attackers to execute arbitrary code via the (1) the second parameter to the DownloadAndExecute method and (2) third parameter to the AddFileEx method, a different vulnerability than CVE-2007-0328.

Affected products

• Macrovision Flexnet Connect: version 6.0 only
• Macrovision Update Service: version 3.0 only; version 4.0 only; version 5.0 only

Published 2007-06-06. Last modified 2026-06-16.