CVE-2024-24810

CVSS V2 None CVSS V3 None

Description

WiX toolset lets developers create installers for Windows Installer, the Windows installation engine. The .be TEMP folder is vulnerable to DLL redirection attacks that allow the attacker to escalate privileges. This impacts any installer built with the WiX installer framework. This issue has been patched in version 4.0.4.

Overview

CVE ID
CVE-2024-24810

Assigner
GitHub_M

Vulnerability Status
PUBLISHED

Published Version
2024-02-07T02:39:35.627Z

Last Modified Date
2024-02-07T02:39:35.627Z

Weakness Enumerations

CWE	URL
CWE-426	http://cwe.mitre.org/data/definitions/426.html

References

Reference URL	Reference Tags
https://github.com/wixtoolset/issues/security/advisories/GHSA-7wh2-wxc7-9ph5	x_refsource_CONFIRM

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-24810
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24810

History

Created	Old Value	New Value	Data Type	Notes
2024-06-26 04:07:25				Added to TrackCVE