CVE-2024-7562: High severity Flexera InstallShield vulnerability
A potential elevated privilege issue has been reported with InstallShield built Standalone MSI setups having multiple InstallScript custom actions configured. All supported versions (InstallShield 2023 R2, InstallShield 2022 R2 and InstallShield 2021 R2) are affected by this issue.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-7562?
CVE-2024-7562 is classified as a potential elevated privilege vulnerability affecting InstallShield setups.
How do I fix CVE-2024-7562?
To remediate CVE-2024-7562, update to a patched version of InstallShield that specifically addresses this vulnerability.
Which versions of InstallShield are affected by CVE-2024-7562?
CVE-2024-7562 affects InstallShield 2023 R2, 2022 R2, and 2021 R2.
What causes the vulnerability described in CVE-2024-7562?
CVE-2024-7562 is caused by the configuration of multiple InstallScript custom actions in standalone MSI setups.
Who is affected by CVE-2024-7562?
Anyone using the affected versions of InstallShield is at risk of being impacted by CVE-2024-7562.