CVE-2022-28999

CVE-2022-28999 concerns Dev-CPP v4.9.9.2 where insecure permissions in the installation directories and binaries (notably devcpp.exe) allow overwriting the binary to execute arbitrary code. Affected software: Dev-CPP 4.9.9.2. Root cause: insecure install/public write permissions enabling tamperin...