CVE-2008-2470

The InstallShield Update Service Agent ActiveX control in isusweb.dll allows remote attackers to cause a denial of service (memory corruption and browser crash) and possibly execute arbitrary code via a call to ExecuteRemote with a URL that results in a 404 error response.

• http://support.installshield.com/kb/view.asp?articleid=Q113020Patch
• http://www.kb.cert.org/vuls/id/630017Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/31235Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2008/2625Permissions Required, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45248VDB Entry
• http://support.installshield.com/kb/view.asp?articleid=Q113020Patch
• http://www.kb.cert.org/vuls/id/630017Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/31235Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2008/2625Permissions Required, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45248VDB Entry

Published

Sep 18, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-2461SQL injection vulnerability in index.php in Netious CMS 0.4 …
• CVE-2008-2462Cross-site scripting (XSS) vulnerability in the viewfile doc…
• CVE-2008-2463The Microsoft Office Snapshot Viewer ActiveX control in snap…
• CVE-2008-2464The mld_input function in sys/netinet6/mld6.c in the kernel …
• CVE-2008-2468Multiple buffer overflows in the QIP Server Service (aka qip…
• CVE-2008-2469Heap-based buffer overflow in the SPF_dns_resolv_lookup func…
• CVE-2008-2474Buffer overflow in x87 before 3.5.5 in ABB Process Communica…
• CVE-2008-2475eBay Enhanced Picture Uploader ActiveX control (EPUWALcontro…
• CVE-2008-2476The IPv6 Neighbor Discovery Protocol (NDP) implementation in…
• CVE-2008-2477SQL injection vulnerability in index.php in MxBB (aka MX-Sys…
• CVE-2008-2478scripts/wwwacct in cPanel 11.18.6 STABLE and earlier and 11.…
• CVE-2008-2479Multiple SQL injection vulnerabilities in phpFix 2.0 allow r…