CVE-2023-29080

Privilege escalation in InstallShield

State: Published
Severity: 8.5 High
Published: Jan 30, 2025
Updated: Feb 12, 2025
Reserved: Mar 30, 2023

Description

Potential privilege escalation vulnerability in Revenera InstallShield versions 2022 R2 and 2021 R2 due to adding InstallScript custom action to a Basic MSI or InstallScript MSI project extracting few binaries to a predefined writable folder during installation time. The standard user account has write access to these files and folders, hence replacing them during installation time can lead to a DLL hijacking vulnerability.

Scores

CVSS	Score	Vector	Source
4.0	8.5 High	CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N	flexera

Weaknesses

CWE-552 Files or Directories Accessible to External Parties

Affected Products

Product	Versions
InstallShieldRevenera	2022 R2 to before 2022 R2 (28.0.0.763)Affectedfrom InstallShield 2022 R2 Security Patch (28.0.0.763)Not affected 2021 R2 to before 2021 R2 (27.0.0.126)Affectedfrom InstallShield 2021 R2 Security Patch (27.0.0.126)Not affected

References

https://community.revenera.com/s/article/cve-2023-29080-security-patch-for-the-possible-privileged-escalation-scenarios-identified-in-installshield-nbspvendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.