Advanced Installer Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

A local privilege escalation vulnerability has been identified in Advanced Installer versions prior to 22.6. The issue arises from an uncontrolled search path element, allowing low-privileged attackers to execute arbitrary code with SYSTEM privileges. When the installer is run as SYSTEM, it searches for non-existent binaries in standard-user writable locations and executes them if found. Attackers can exploit this by placing a malicious binary in a targeted folder, leading to unauthorized SYSTEM-level code execution.

Impact

Exploitation of this vulnerability allows for arbitrary code execution with SYSTEM privileges.

Remediation

Users can upgrade to Advanced Installer version 22.6 or later to address this vulnerability.