Description
The InstallShield Update Service Agent ActiveX control in isusweb.dll allows remote attackers to cause a denial of service (memory corruption and browser crash) and possibly execute arbitrary code via a call to ExecuteRemote with a URL that results in a 404 error response.
References
- VU#630017 third-party-advisory
- http://support.installshield.com/kb/view.asp?articleid=Q113020
- ADV-2008-2625 vdb-entry
- 31235 vdb-entry
- installshield-updateservice-bo(45248) vdb-entry