Privilege escalation

2023-03-2921:15:00

PRIOn knowledge base

www.prio-n.com

windows installer

vulnerability

privilege escalation

installscript custom action

7.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

A vulnerability has been reported in the windows installer (MSI) built with InstallScript custom action. This vulnerability may allow privilege escalation when invoked ‘repair’ of the MSI which has an InstallScript custom action.

CPENameOperatorVersion
revenera_installshieldeq2021 r1
revenera_installshieldlt2021
revenera_installshieldeq2021

Name	Operator	Version
revenera_installshield	eq	2021 r1
revenera_installshield	lt	2021
revenera_installshield	eq	2021

References

community.flexera.com/t5/InstallShield-Knowledge-Base/CVE-2021-41526-Privilege-escalation-vulnerability-during-MSI/ta-p/218137/jump-to/first-unread-message

github.com/mandiant/Vulnerability-Disclosures/blob/master/MNDT-2021-0011/MNDT-2021-0011.md