CVE-2007-6744: Flexerasoftware Installshield

Low severity, CVSS 2.1. EPSS: 0.3% chance of exploitation in the next 30 days.

Flexera Macrovision InstallShield before 2008 sends a digital-signature password to an unintended application during certain signature operations involving .spc and .pvk files, which might allow local users to obtain sensitive information via unspecified vectors, related to an incorrect interaction between InstallShield and Signcode.exe.

Affected products

• Flexerasoftware Installshield: up to and including 1.0; up to and including 2.0; up to and including 3.0; up to and including 12; version 10.5 only; version 11 only; …

Published 2012-01-19. Last modified 2026-06-16.