CPE Details
Nullsoft Scriptable Install System (NSIS) 2.40
2.40
2019-08-19
14h07 +00:00
14h07 +00:00
2019-08-19
14h07 +00:00
14h07 +00:00
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
CPE Name: cpe:2.3:a:nullsoft:nullsoft_scriptable_install_system:2.40:*:*:*:*:*:*:*
Informations
Vendor
nullsoftProduct
nullsoft_scriptable_install_systemVersion
2.40Related CVE
| CVE ID | Publié | Description | Score | Gravité |
|---|---|---|---|---|
| Nullsoft Scriptable Install System (NSIS) before 3.09 mishandles access control for an uninstaller directory. | 5.3 |
Moyen |
||
| Nullsoft Scriptable Install System (NSIS) before 2.49 uses temporary folder locations that allow unprivileged local users to overwrite files. This allows a local attack in which either a plugin or the uninstaller can be replaced by a Trojan horse program. | 5.5 |
Moyen |
||
| Nullsoft Scriptable Install System (NSIS) before 2.49 has unsafe implicit linking against Version.dll. In other words, there is no protection mechanism in which a wrapper function resolves the dependency at an appropriate time during runtime. | 7.8 |
Haute |
