Revenera InstallShield Privilege Escalation Vulnerability in Version 2023 R1

A privilege escalation vulnerability exists in Revenera InstallShield version 2023 R1. When a local administrator runs a renamed Setup.exe, the MPR.dll may be loaded from an insecure location, leading to unauthorized privilege escalation. This issue has been addressed in InstallShield versions 2023 R2 and later.

Impact

Exploitation of this vulnerability allows for unauthorized privilege escalation.

Remediation

Users can upgrade to InstallShield version 2023 R2 or later to address this vulnerability.