| Package | Affected versions | Patched versions |
|---|---|---|
| nullsoft scriptable install system | < 2.49 | 2.49 |
Nullsoft Scriptable Install System (NSIS) before 2.49 uses temporary folder locations that allow unprivileged local users to overwrite files. This allows a local attack in which either a plugin or the uninstaller can be replaced by a Trojan horse program.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free