CVE-2016-2542
First published: Wed Feb 24 2016(Updated: )
Untrusted search path vulnerability in Flexera InstallShield through 2015 SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory of a setup-launcher executable file.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Flexera InstallShield | <2015 | |
| Flexera InstallShield | =2015 | |
| Flexera InstallShield | =2015-sp1 | |
| AVEVA Edge 2020 R2 SP1 | ||
| AVEVA Edge 2020 R2 SP1 w/ HF 2020.2.00.40 | ||
| AVEVA Edge 2020 R2 and all prior versions (formerly known as InduSoft Web Studio) | ||
| Flexera InstallShield through 2015 SP1 | ||
| Flexera InstallShield is integrated into many products sold by other companies |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/bid/84213
- http://www.securitytracker.com/id/1035097
- https://flexeracommunity.force.com/customer/articles/INFO/Best-Practices-to-Avoid-Windows-Setup-Launcher-Executable-Issues
- https://us-cert.cisa.gov/ics/advisories/icsa-20-287-03
- https://www.oracle.com/security-alerts/cpuApr2021.html
- https://www.tenable.com/security/tns-2019-08
- https://www.cisa.gov/news-events/ics-advisories/icsa-22-326-01 (Advisory)
- https://www.cisa.gov/news-events/ics-advisories/icsa-20-287-03 (Advisory)
- collector/nvd-index
- agent/type
- agent/author
- agent/description
- collector/ics-cert-advisory
- source/ICS
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/references
- agent/weakness
- agent/severity
- agent/event
- agent/softwarecombine
- agent/tags
- agent/trending
- vendor/flexera
- canonical/flexera installshield
- version/flexera installshield/2015
- version/flexera installshield/2015-sp1
- vendor/aveva
- canonical/aveva edge 2020 r2 sp1
- canonical/aveva edge 2020 r2 sp1 w/ hf 2020.2.00.40
- canonical/aveva edge 2020 r2 and all prior versions (formerly known as indusoft web studio)
- canonical/flexera installshield through 2015 sp1
- canonical/flexera installshield is integrated into many products sold by other companies