issues vulnerabilities

3 known vulnerabilities in issues from Wixtoolset. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.9 High severity

  issues: Improper Link Resolution Before File Access

  CVE-2024-29188Mar 24, 2024Wixtoolset

  WiX toolset lets developers create installers for Windows Installer, the Windows installation engine. The custom action behind WiX's `RemoveFolderEx` functionality could allow a standard user to delete protected directories. `RemoveFolderEx` deletes an entire

• 7.3 High severity

  issues: Incorrect Permission Assignment for Critical Resource

  CVE-2024-29187Mar 24, 2024Wixtoolset

  WiX toolset lets developers create installers for Windows Installer, the Windows installation engine. When a bundle runs as SYSTEM user, Burn uses GetTempPathW which points to an insecure directory C:\Windows\Temp to drop and load multiple binaries. Standard u

• 7.8 High severity

  issues: Untrusted Search Path

  CVE-2024-24810Feb 7, 2024Wixtoolset

  WiX toolset lets developers create installers for Windows Installer, the Windows installation engine. The .be TEMP folder is vulnerable to DLL redirection attacks that allow the attacker to escalate privileges. This impacts any installer built with the WiX ins