CVE-2008-2470

CriticalCVSS 9.3/10Last modified Jun 16, 2026

Description

The InstallShield Update Service Agent ActiveX control in isusweb.dll allows remote attackers to cause a denial of service (memory corruption and browser crash) and possibly execute arbitrary code via a call to ExecuteRemote with a URL that results in a 404 error response.

Metrics

CVSS 2.0 9.3/10AV:N/AC:M/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://support.installshield.com/kb/view.asp?articleid=Q113020Patch
http://www.kb.cert.org/vuls/id/630017Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/31235Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2008/2625Permissions Required, Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/45248VDB Entry
http://support.installshield.com/kb/view.asp?articleid=Q113020Patch
http://www.kb.cert.org/vuls/id/630017Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/31235Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2008/2625Permissions Required, Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/45248VDB Entry

Timeline

Published: Sep 18, 2008
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2008

CVE-2008-247410.0Buffer overflow in x87 before 3.5.5 in ABB Process Communication Unit 400 (PCU400) 4.4 through 4.6 allows remote attackers to execute arbitr CVE-2008-24759.3eBay Enhanced Picture Uploader ActiveX control (EPUWALcontrol.dll) before 1.0.27 allows remote attackers to execute arbitrary commands via t CVE-2008-24769.3The IPv6 Neighbor Discovery Protocol (NDP) implementation in (1) FreeBSD 6.3 through 7.1, (2) OpenBSD 4.2 and 4.3, (3) NetBSD, (4) Force10 F CVE-2008-24777.5SQL injection vulnerability in index.php in MxBB (aka MX-System) Portal 2.7.3 allows remote attackers to execute arbitrary SQL commands via CVE-2008-24788.5scripts/wwwacct in cPanel 11.18.6 STABLE and earlier and 11.23.1 CURRENT and earlier allows remote authenticated users with reseller privile CVE-2008-24796.8Multiple SQL injection vulnerabilities in phpFix 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) kind parameter to CVE-2008-248010.0PHP remote file inclusion vulnerability in plus.php in plusPHP Short URL Multi-User Script 1.6 allows remote attackers to execute arbitrary CVE-2008-248110.0PHP remote file inclusion vulnerability in authentication/phpbb3/phpbb3.functions.php in phpRaider 1.0.7 and 1.0.7a, when register_globals i CVE-2008-24827.5Directory traversal vulnerability in install_mod.php in insanevisions OneCMS 2.5 allows remote attackers to include and execute arbitrary lo CVE-2008-24836.8Directory traversal vulnerability in index.php in Xomol CMS 1.20071213 allows remote attackers to include and execute arbitrary local files CVE-2008-24846.8SQL injection vulnerability in index.php in Xomol CMS 1.20071213, when magic_quotes_gpc is disabled, allows remote attackers to execute arbi CVE-2008-24854.3Cross-site scripting (XSS) vulnerability in the URL redirection script (inc/url_redirection.inc.php) in PCPIN Chat before 6.11 allows remote