Lucene search
PRIOn knowledge basePRION:CVE-2024-24810HistoryFeb 07, 2024 - 3:15 a.m.
Code injection
2024-02-0703:15:00
PRIOn knowledge base
www.prio-n.com
3
code injection
wix toolset
dll redirection
privilege escalation
patched vulnerability
WiX toolset lets developers create installers for Windows Installer, the Windows installation engine. The .be TEMP folder is vulnerable to DLL redirection attacks that allow the attacker to escalate privileges. This impacts any installer built with the WiX installer framework. This issue has been patched in version 4.0.4.
| CPE | Name | Operator | Version |
|---|---|---|---|
| wix_toolset | ge | 4.0.0 | |
| wix_toolset | lt | 4.0.4 | |
| wix_toolset | lt | 3.14.0 |
Related
osv
osv
CVE-2024-24810
2024-02-07 03:15:50
nessus
nessus
Wix Toolset < 3.14 / 4.x < 4.0.4 Privilege Escalation
2024-02-15 00:00:00
veracode
veracode
DLL Redirection Attacks
2024-02-09 07:04:58
cve
cve
CVE-2024-24810
2024-02-07 03:15:50
nvd
nvd
CVE-2024-24810
2024-02-07 03:15:50
cvelist
cvelist
github
github