CVE-2016-2542 Untrusted search path vulnerability in Flexera InstallShield through 2015 SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory of a setup-launcher executab...
HighCVSS 7.8
EPSS 0.50%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Untrusted search path vulnerability in Flexera InstallShield through 2015 SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory of a setup-launcher executable file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Flexera InstallShield | < 2015 | 2015 |
| Flexera InstallShield | = 2015 | No fix listed |
| Flexera InstallShield | = 2015-sp1 | No fix listed |
References
- 84213 third-party-advisory vdb-entry
- 1035097 third-party-advisory vdb-entry
- flexeracommunity.force.com technical-description third-party-advisory
- us-cert.cisa.gov
- www.oracle.com
- www.tenable.com third-party-advisory