Description
Potential privilege escalation vulnerability in Revenera InstallShield versions 2022 R2 and 2021 R2 due to adding InstallScript custom action to a Basic MSI or InstallScript MSI project extracting few binaries to a predefined writable folder during installation time. The standard user account has write access to these files and folders, hence replacing them during installation time can lead to a DLL hijacking vulnerability.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Revenera | InstallShield | 2022 R2 – < 2022 R2 (28.0.0.763), 2021 R2 – < 2021 R2 (27.0.0.126) | 2022 R2 (28.0.0.763) |
Advisories 1
- WID-SEC-2023-1168 SAP Patchday Mai 2023 BSI CERT-Bund (WID) · May 9, 2023