| Package | Affected versions | Patched versions |
|---|---|---|
| nullsoft scriptable install system | ≥ 3.06.1, < 3.12 | 3.12 |
NSIS (Nullsoft Scriptable Install System) 3.06.1 before 3.12 sometimes uses the Low IL temp directory when executing as SYSTEM, allowing local attackers to gain privileges (if they can cause my_GetTempFileName to return 0, as shown in the references).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free