The vulnerability of the update check function of the Advanced Updater package, a tool for application packaging by Caphyon Advanced Installer, allows a perpetrator to execute arbitrary code.

The vulnerability of the update check function of the Advanced Updater tool for Caphyon Advanced Installer lies in the fact that code is loaded without being checked for integrity during the processing of the CustomDetection binary with the CustomDetectionParameter parameter. Exploiting this...

CVE-2022-27438

CVE-2022-27438 affects Caphyon Advanced Installer 19.3 and earlier and products using the Advanced Updater. The root cause is a remote code execution vulnerability in the update check function via the CustomDetection parameter. Exploitation requires starting an affected installation to trigger th...