CVE-2021-22037

Under certain circumstances, when manipulating the Windows registry, InstallBuilder uses the reg.exe system command. The full path to the command is not enforced, which results in a search in the search path until a binary can be identified. This makes the installer/uninstaller vulnerable to Path...

CVE-2021-22037: Uncontrolled Search Path Element

Under certain circumstances, when manipulating the Windows registry, InstallBuilder uses the reg.exe system command. The full path to the command is not enforced, which results in a search in the search path until a binary can be identified. This makes the installer/uninstaller vulnerable to Path...

InstallBuilder security feature vulnerability

Vmware InstallBuilder is a multi-platform installer development and automatic update tool from Vmware, Inc. A security vulnerability exists in InstallBuilder that stems from the fact that under certain circumstances on the InstallBuilder Windows version, the uninstaller binary copies itself to a...

PT-2021-4972

Name of the Vulnerable Software and Affected Versions InstallBuilder affected versions not specified Description The issue is related to the use of the reg.exe system command by InstallBuilder when manipulating the Windows registry. Since the full path to the command is not enforced, it leads to ...

PT-2021-4980

Name of the Vulnerable Software and Affected Versions VMware InstallBuilder versions affected versions not specified Description The issue is related to the use of insufficiently random values in the uninstaller binary of VMware InstallBuilder for Windows. When the uninstaller is executed, it...

CVE-2020-3979

InstallBuilder for Qt Windows versions prior to 20.7.0 installers look for plugins at a predictable location at initialization time, writable by non-admin users. While those plugins are not required, they are loaded if present, which could allow an attacker to plant a malicious library which coul...

CVE-2020-3979

InstallBuilder for Qt Windows versions prior to 20.7.0 installers look for plugins at a predictable location at initialization time, writable by non-admin users. While those plugins are not required, they are loaded if present, which could allow an attacker to plant a malicious library which coul...

Remote code execution

InstallBuilder for Qt Windows versions prior to 20.7.0 installers look for plugins at a predictable location at initialization time, writable by non-admin users. While those plugins are not required, they are loaded if present, which could allow an attacker to plant a malicious library which coul...

CVE-2020-3979

InstallBuilder for Qt Windows prior to 20.7.0 is vulnerable: installers load plugins from a predictable location writable by non-admin users, enabling potential library planting and code execution with the installer's security scope. A fix is available in version 20.7.0; apply the update to mitig...

CVE-2020-3979

InstallBuilder for Qt Windows versions prior to 20.7.0 installers look for plugins at a predictable location at initialization time, writable by non-admin users. While those plugins are not required, they are loaded if present, which could allow an attacker to plant a malicious library which coul...

PT-2020-17820

Name of the Vulnerable Software and Affected Versions InstallBuilder for Qt Windows versions prior to 20.7.0 Description The issue allows an attacker to potentially execute code with the security scope of the installer by planting a malicious library in a predictable location where the installer...

CVE-2020-3979: Uncontrolled Search Path Element

InstallBuilder for Qt Windows versions prior to 20.7.0 installers look for plugins at a predictable location at initialization time, writable by non-admin users. While those plugins are not required, they are loaded if present, which could allow an attacker to plant a malicious library which coul...

VMware InstallBuilder Resource Management Error Vulnerability

VMware InstallBuilder is a multi-platform installer development and automatic update tool from VMware. A security vulnerability exists in VMware InstallBuilder versions prior to 19.11. An attacker could exploit this vulnerability to cause a denial of service...

CVE-2020-3946

InstallBuilder AutoUpdate tool and regular installers enabling built with versions earlier than 19.11 are vulnerable to Billion laughs attack denial-of-service...

CVE-2020-3946

InstallBuilder AutoUpdate tool and regular installers enabling built with versions earlier than 19.11 are vulnerable to Billion laughs attack denial-of-service...

Design/Logic Flaw

InstallBuilder AutoUpdate tool and regular installers enabling built with versions earlier than 19.11 are vulnerable to Billion laughs attack denial-of-service...

CVE-2020-3946

CVE-2020-3946 affects VMware InstallBuilder (AutoUpdate tool and regular installers) where builds using prior to version 19.11 are vulnerable to a Billion Laughs denial-of-service. Multiple sources in connected documents confirm the affected component and the pre-19.11 versions as vulnerable, wi...

CVE-2020-3946

InstallBuilder AutoUpdate tool and regular installers enabling built with versions earlier than 19.11 are vulnerable to Billion laughs attack denial-of-service...

PT-2020-17816

Name of the Vulnerable Software and Affected Versions InstallBuilder AutoUpdate tool and regular installers versions prior to 19.11 Description The issue concerns a denial-of-service vulnerability, specifically a Billion laughs attack, which affects the InstallBuilder AutoUpdate tool and regular...

CVE-2020-3946: Improper Restriction of Recursive Entity References in DTDs

InstallBuilder AutoUpdate tool and regular installers enabling built with versions earlier than 19.11 are vulnerable to Billion laughs attack denial-of-service...