Approved changes feed: RSS · Atom
cpe:2.3:a:wixtoolset:issues:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Wixtoolset (96cfcc42-c1dd-593b-a169-3a07c926f115) |
|---|---|
| Product | Issues (a5024adf-ac34-501e-94b1-bb5df5d9e75f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-29188 |
vulnerable | 2026-06-08 06:33:28.933996 |
Malicious directory junction can cause WiX RemoveFoldersEx to possibly delete elevated files
HIGH (7.8)
WiX toolset lets developers create installers for Windows Installer, the Windows installation engine. The custom action behind WiX's `RemoveFolderEx` functionality could allow a standard user to delete protected directories. `RemoveFolderEx` deletes an entire directory tree during installation or uninstallation. It does so by recursing every subdirectory starting at a specified directory and adding each subdirectory to the list of directories Windows Installer should delete. If the setup author instructed `RemoveFolderEx` to delete a per-user folder from a per-machine installer, an attacker could create a directory junction in that per-user folder pointing to a per-machine, protected directory. Windows Installer, when executing the per-machine installer after approval by an administrator, would delete the target of the directory junction. This vulnerability is fixed in 3.14.1 and 4.0.5.
Published: 2024-03-24T19:46:25.875Z
Updated: 2024-08-02T01:10:54.532Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-29187 |
vulnerable | 2026-06-08 06:33:28.933495 |
WiX based installers are vulnerable to binary hijack when run as SYSTEM
HIGH (7.3)
WiX toolset lets developers create installers for Windows Installer, the Windows installation engine. When a bundle runs as SYSTEM user, Burn uses GetTempPathW which points to an insecure directory C:\Windows\Temp to drop and load multiple binaries. Standard users can hijack the binary before it's loaded in the application resulting in elevation of privileges. This vulnerability is fixed in 3.14.1 and 4.0.5.
Published: 2024-03-24T19:38:38.140Z
Updated: 2024-08-13T14:28:49.838Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-24810 |
vulnerable | 2026-06-08 06:29:41.814127 |
WiX is vulnerable to DLL redirection attacks that allow the attacker to escalate privileges
HIGH (8.3)
WiX toolset lets developers create installers for Windows Installer, the Windows installation engine. The .be TEMP folder is vulnerable to DLL redirection attacks that allow the attacker to escalate privileges. This impacts any installer built with the WiX installer framework. This issue has been patched in version 4.0.4.
Published: 2024-02-07T02:39:35.627Z
Updated: 2024-08-01T23:28:12.588Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.