MacroVision InstallShield is "an installer solution utilized by many software vendors in order to ensure that their products are delivered and setup properly on the end-user systems. InstallSheild includes support for an optional component called the 'Update Service'. This service allows vendors to notify clients of product patches and updates, and allow them to be easily installed". Remote exploitation of an unsafe method vulnerability in Macrovision InstallShield Update Service allows attackers to execute arbitrary code with the privileges of the currently logged-in user.
http://www.securiteam.com/windowsntf...M0030AKAY.html
