CVE-2015-9268

CVE-2015-9268 affects Nullsoft Scriptable Install System (NSIS) prior to 2.49, which has unsafe implicit linking against Version.dll. The description in the CVE notes that there is no protection mechanism to resolve the dependency at runtime, indicating a potential for misuse during installation ...

CVE-2015-9267

CVE-2015-9267 affects NSIS (Nullsoft Scriptable Install System) before 2.49. The vulnerability arises from the use of temporary folder locations, enabling unprivileged local users to overwrite files, which can allow replacing either an installer plugin or the uninstaller with a trojan. In practic...