CVE-2024-29187highCWE-732

CVE-2024-29187: falha de alta gravidade em wixtoolset issues

WiX based installers are vulnerable to binary hijack when run as SYSTEM

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar issues+ Monitorar wix

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.3epss 0.5%
WiX toolset lets developers create installers for Windows Installer, the Windows installation engine. When a bundle runs as SYSTEM user, Burn uses GetTempPathW which points to an insecure directory C:\Windows\Temp to drop and load multiple binaries. Standard users can hijack the binary before it's loaded in the application resulting in elevation of privileges. This vulnerability is fixed in 3.14.1 and 4.0.5.
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Produtos afetados
wixtoolset · issues
CVEs relacionadas — wixtoolset issues

No mesmo produto, das mais perigosas para as menos.

CVE-2024-29188HIGHMalicious directory junction can cause WiX RemoveFoldersEx to possibly delete elevated filesEPSS 0.2%CVE-2024-24810HIGHWiX is vulnerable to DLL redirection attacks that allow the attacker to escalate privilegesEPSS 0.2%