CVE-2016-4560: High severity zero g installanywhere vulnerability
Untrusted search path vulnerability in Flexera InstallAnywhere allows local users to gain privileges via a Trojan horse DLL in the current working directory of a setup-launcher executable file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-4560?
CVE-2016-4560 has been classified as a high severity vulnerability due to its potential to grant local users increased privileges.
How do I fix CVE-2016-4560?
To mitigate CVE-2016-4560, ensure that the working directory for setup executables does not contain untrusted DLLs.
Who is affected by CVE-2016-4560?
CVE-2016-4560 affects users of Flexera InstallAnywhere who are running installations with setup-launcher executables.
What type of vulnerability is CVE-2016-4560?
CVE-2016-4560 is an untrusted search path vulnerability that allows the execution of malicious DLLs.
Can CVE-2016-4560 be exploited remotely?
CVE-2016-4560 requires local access to exploit, as it targets the working directory of a local installation process.