PT-2024-4136

Name of the Vulnerable Software and Affected Versions WiX Toolset versions prior to 4.0.4 Description The issue is related to the use of an unreliable path search in the WiX Toolset, which can be exploited through DLL redirection attacks. This allows an attacker to escalate privileges. The...

CVE-2020-18169

A vulnerability in the Windows installer XML WiX toolset of TechSmith Snagit 19.1.1.2860 allows attackers to escalate privileges. NOTE: Exploit of the Snagit installer would require the end user to ignore other safety mechanisms provided by the Host OS. See reference document for more details...

Design/Logic Flaw

A vulnerability in the Windows installer XML WiX toolset of TechSmith Snagit 19.1.1.2860 allows attackers to escalate privileges. NOTE: Exploit of the Snagit installer would require the end user to ignore other safety mechanisms provided by the Host OS. See reference document for more details...

CVE-2020-18169

TechSmith Snagit version 19.1.1.2860 is affected by a privilege-escalation issue in the Windows installer XML (WiX) toolset. The vulnerability is described as enabling elevation of privileges via the Snagit installer, with the caveat that exploitation requires the user to bypass other OS safety m...

CVE-2020-18169: Improper Privilege Management

A vulnerability in the Windows installer XML WiX toolset of TechSmith Snagit 19.1.1.2860 allows attackers to escalate privileges. NOTE: Exploit of the Snagit installer would require the end user to ignore other safety mechanisms provided by the Host OS. See reference document for more details...

CVE-2019-16511

An issue was discovered in DTF in FireGiant WiX Toolset before 3.11.2. Microsoft.Deployment.Compression.Cab.dll and Microsoft.Deployment.Compression.Zip.dll allow directory traversal during CAB or ZIP archive extraction, because the full name of an archive file even with a ../ sequence is...

CVE-2019-16511

An issue was discovered in DTF in FireGiant WiX Toolset before 3.11.2. Microsoft.Deployment.Compression.Cab.dll and Microsoft.Deployment.Compression.Zip.dll allow directory traversal during CAB or ZIP archive extraction, because the full name of an archive file even with a ../ sequence is...

Directory traversal

An issue was discovered in DTF in FireGiant WiX Toolset before 3.11.2. Microsoft.Deployment.Compression.Cab.dll and Microsoft.Deployment.Compression.Zip.dll allow directory traversal during CAB or ZIP archive extraction, because the full name of an archive file even with a ../ sequence is...

CVE-2019-16511

An issue was discovered in DTF in FireGiant WiX Toolset before 3.11.2. Microsoft.Deployment.Compression.Cab.dll and Microsoft.Deployment.Compression.Zip.dll allow directory traversal during CAB or ZIP archive extraction, because the full name of an archive file even with a ../ sequence is...

CVE-2019-16511

CVE-2019-16511 affects FireGiant WiX Toolset’s DTF prior to 3.11.2. The vulnerability arises from directory traversal during CAB/ZIP extraction when the full archive name (including ../) is concatenated with the destination path in Microsoft.Deployment.Compression.Cab.dll and Microsoft.Deployment...

PT-2019-14679

Name of the Vulnerable Software and Affected Versions FireGiant WiX Toolset versions prior to 3.11.2 Description An issue in DTF allows directory traversal during CAB or ZIP archive extraction. This occurs because the full name of an archive file, including any ../ sequence, is concatenated with...

CVE-2019-16511: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in DTF in FireGiant WiX Toolset before 3.11.2. Microsoft.Deployment.Compression.Cab.dll and Microsoft.Deployment.Compression.Zip.dll allow directory traversal during CAB or ZIP archive extraction, because the full name of an archive file even with a ../ sequence is...

WiX Toolset DLL Hijacking

Hi @ll, executable installers ° created with the WiX Toolset see , and of course the WiX Toolset installer itself too resp. using its bootstrapper "burn.exe" are vulnerable: see 1. They load and execute a rogue/bogus/malicious FEClient.dll ' and other DLLs too, dependent on the version of Windows...