Installanywhere Security Vulnerabilities - February

CVE-2016-4560

Untrusted search path vulnerability in Flexera InstallAnywhere allows local users to gain privileges via a Trojan horse DLL in the current working directory of a setup-launcher executable file.