CVE-2023-29080

High

Description

Potential privilege escalation vulnerability in Revenera InstallShield versions 2022 R2 and 2021 R2 due to adding InstallScript custom action to a Basic MSI or InstallScript MSI project extracting few binaries to a predefined writable folder during installation time. The standard user account has write access to these files and folders, hence replacing them during installation time can lead to a DLL hijacking vulnerability.

SeverityHigh

CVSS8.5

Exploit probability—

ProductInstallShield

PublishedJan 30, 2025

First seenJan 30, 2025

Weakness typeCWE-552CWE-552

How to fix

Update

Revenera InstallShield2022 R2 (28.0.0.763), 2021 R2 (27.0.0.126) or later

Vendor advisories

community.revenera.com/s/article/cve-2023-29080-security-patch-for-the-possible-privileged-escalation-scenarios-identified-in-installshield-nbsp

Affected products

Product	Affected versions	Fixed in
Revenera InstallShield	2022 R2 ≤ v < 2022 R2 (28.0.0.763), 2021 R2 ≤ v < 2021 R2 (27.0.0.126)	2022 R2 (28.0.0.763), 2021 R2 (27.0.0.126)

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.