Nullsoft Nullsoft Scriptable Install System
En bref
- Source
- NVD
- EPSS
- EPSS 0.21 % · centile 11 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- mitre
- Statut NVD
- Analyzed
Rechercher sur…
Description
NSIS (Nullsoft Scriptable Install System) 3.06.1 before 3.12 sometimes uses the Low IL temp directory when executing as SYSTEM, allowing local attackers to gain privileges (if they can cause my_GetTempFileName to return 0, as shown in the references).
Faiblesses (CWE)
- CWE-427 — Élément de chemin de recherche non maîtrisé
Références
- https://nsis.sourceforge.io/Docs/AppendixF.html#v3.12-cl
- https://github.com/NSIS-Dev/nsis/commit/8e6f02205d5f22da6c7855dbfe59b2af667330ca
- https://github.com/NSIS-Dev/nsis/blob/7359413009afd4f0fff472d841fc2f2cc0e0a5f8/Source/exehead/util.c#L475-L484
- https://learn.microsoft.com/en-us/windows/win32/api/winbase/nf-winbase-gettempfilename
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | HIGH 7.8 | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | mitre |
| CVSS 3.1 | HIGH 7.8 | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | NVD · cve@mitre.org (Secondary) |
Références européennes
- ENISA EUVD · EUVD-2026-25637
- GCVE · GCVE-0-2026-42171
Configurations affectées (CPE NVD)
cpe:2.3:a:nullsoft:nullsoft_scriptable_install_system:*:*:*:*:*:*:*:*≥ 3.06.1 < 3.12
Produits affectés
| Produit | Versions |
|---|---|
| Nullsoft · Nullsoft Scriptable Install System | affected 3.06.1 < 3.12 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |