Revenera InstallShield Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in Revenera InstallShield versions 2022 R2 and 2021 R2. This vulnerability arises from the addition of InstallScript custom actions to Basic MSI or InstallScript MSI projects, which extract certain binaries to a predefined writable folder during installation. Standard user accounts can write to these files and folders, allowing them to be replaced during installation and potentially leading to a DLL hijacking vulnerability.

Impact

Exploitation of this vulnerability could allow for unauthorized privilege escalation, with the potential for DLL hijacking.

Remediation

Users can apply the security patch mentioned in the Revenera community article titled 'CVE-2023-29080 Security Patch for the Possible Privileged Escalation Scenarios Identified in InstallShield'.