CVE-2023-37378

Mô tả

Tham khảo

• sf.net/p/nsis/bugs/1296 · Issue Tracking
• kichik/nsis commit 281e285 · Patch
• kichik/nsis commit 409b584 · Patch
• kichik/nsis commit c40cf78 · Patch
• lists.debian.org/debian-lts-announce/2023/07/msg00005.html · Mailing List
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A65FBUMHLZ7GBV3VDKUB5EK3A7X2UUWK
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OZPAAU57IA3NP6UOUXNBUQBAYK3JB2IM
• nsis.sourceforge.io/Docs/AppendixF.html · Release Notes
• sourceforge.net/p/nsis/news/2023/07/nsis-309-released · Release Notes
• lists.debian.org/debian-lts-announce/2024/09/msg00013.html

Lỗ hổng khác của nullsoft scriptable install system

• CVE-2026-42171CAO 7.8NSIS (Nullsoft Scriptable Install System) 3.06.1 before 3.12 sometimes uses the Low IL temp directory when executing as SYSTEM, allowing loc…
• CVE-2015-9268CAO 7.8Nullsoft Scriptable Install System (NSIS) before 2.49 has unsafe implicit linking against Version.dll. In other words, there is no protectio…
• CVE-2015-9267TRUNG BÌNH 5.5Nullsoft Scriptable Install System (NSIS) before 2.49 uses temporary folder locations that allow unprivileged local users to overwrite files…