PT-2016-3439

🗓️ 24 Feb 2016 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 1 Views

Untrusted search path may allow local privilege escalation via a Trojan dynamic library in the setup launcher; updates needed for InstallShield 2015 and AVEVA Edge has no fix yet.

Reporter	Title	Published	Views	Family All 50
IBM Security Bulletins	Security Bulletin: Flexera InstallShield has a security vulnerability that affects Content Manager Enterprise Edition Client for Windows (CVE-2016-2542)	29 Jan 202419:12	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in InstallShield affects IBM Tivoli Storage Manager for Virtual Environments: Data Protection for VMware (CVE-2016-2542)	17 Jun 201815:23	–	ibm
IBM Security Bulletins	Security Bulletin: Various IBM WebSphere MQ Installers are susceptible to DLL-planting vulnerabilities (CVE-2016-2542 & CVE-2016-4560)	25 Jun 201805:54	–	ibm
IBM Security Bulletins	Security Bulletins for IBM Tealeaf Customer Experience offerings	16 Jun 201819:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Forms Viewer Installation could allow a remote attacker to execute arbitrary code on the system (CVE-2016-2542)	16 Jun 201820:00	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in InstallShield affects IBM Tivoli Storage Manager Server (CVE-2016-2542)	17 Jun 201815:24	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Forms Designer Installation could allow a remote attacker to execute arbitrary code on the system (CVE-2016-2542)	16 Jun 201820:00	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in InstallShield affects IBM Tivoli Storage Manager FastBack for Bare Machine Recovery (CVE-2016-2542)	17 Jun 201815:24	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in InstallShield/InstallAnywhere affects IBM Informix CSDK and Server installation on Windows(CVE-2016-2542, CVE-2016-4560)	16 Jun 201813:40	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security issues in IBM Tealeaf Customer Experience on Cloud Network Capture Add-On	16 Jun 201820:01	–	ibm

Source	Link
us-cert	www.us-cert.cisa.gov/ics/advisories/icsa-20-287-03
securityfocus	www.securityfocus.com/bid/84213
tenable	www.tenable.com/security/tns-2019-08
securitytracker	www.securitytracker.com/id/1035097
twitter	www.twitter.com/syedaquib77/status/1996822203526963666
cisa	www.cisa.gov/uscert/ics/advisories/icsa-22-326-01
aveva	www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2022-006.pdf
flexeracommunity	www.flexeracommunity.force.com/customer/articles/INFO/Best-Practices-to-Avoid-Windows-Setup-Launcher-Executable-Issues
bdu	www.bdu.fstec.ru/vul/2022-07235
oracle	www.oracle.com/security-alerts/cpuApr2021.html

05 Dec 2025 00:00Current

7.8High risk

Vulners AI Score7.8

CVSS 27.2

CVSS 3.17.8

EPSS0.00185