Title

Flexera InstallShield Untrusted Search Path Vulnerability (Cat II impact)

Discussion

Flexera Software has addressed an untrusted search path vulnerability in Flexera InstallShield. Flexera InstallShield is a proprietary closed-source software tool for creating installers or software packages. To exploit this vulnerability, an attacker would send specially crafted DLL file to an affected system. If successfully exploited, this vulnerability would allow an attacker to gain elevated privileges on the affected system.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-66847

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.