Revenera InstallShield Denial-of-Service Vulnerability via Uninstallation Process

A denial-of-service vulnerability has been identified in Revenera InstallShield versions 2025 R1, 2024 R2, 2023 R2, and prior. The issue arises during the uninstallation process when a local administrator removes the application. The uninstaller does not properly handle symbolic links in a user-writable configuration directory, potentially leading to unintended file deletion and causing a denial-of-service condition.

Impact

Exploitation of this vulnerability can lead to a denial-of-service condition by causing unintended file deletions that disrupt normal application functionality.

Remediation

Users can download the hotfix for this vulnerability from the Product and License Center. The hotfix is available for InstallShield 2025 R1, 2024 R2, and 2023 R2.