We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Assigner | mitre |
Reserved | 2023-07-03 |
Published | 2023-07-03 |
Updated | 2024-09-05 |
Nullsoft Scriptable Install System (NSIS) before 3.09 mishandles access control for an uninstaller directory.
http://sf.net/p/nsis/bugs/1296
https://nsis.sourceforge.io/Docs/AppendixF.html#v3.09
https://sourceforge.net/p/nsis/news/2023/07/nsis-309-released/
https://github.com/kichik/nsis/commit/281e2851fe669d10e0650fc89d0e7fb74a598967
https://github.com/kichik/nsis/commit/409b5841479c44fbf33a6ba97c1146e46f965467
https://github.com/kichik/nsis/commit/c40cf78994e74a1a3a381a850c996b251e3277c0
https://lists.debian.org/debian-lts-announce/2023/07/msg00005.html ([debian-lts-announce] 20230707 [SECURITY] [DLA 3483-1] nsis security update)
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OZPAAU57IA3NP6UOUXNBUQBAYK3JB2IM/ (FEDORA-2023-dfb6cc599f)
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A65FBUMHLZ7GBV3VDKUB5EK3A7X2UUWK/ (FEDORA-2023-b9ec99605f)