Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2015-9267

Опубликовано: 01 окт. 2018
Источник: debian
EPSS Низкий

Описание

Nullsoft Scriptable Install System (NSIS) before 2.49 uses temporary folder locations that allow unprivileged local users to overwrite files. This allows a local attack in which either a plugin or the uninstaller can be replaced by a Trojan horse program.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
nsisfixed2.50-1package

Примечания

  • https://sourceforge.net/p/nsis/bugs/1125/

EPSS

Процентиль: 13%
0.00042
Низкий

Связанные уязвимости

CVSS3: 5.5
ubuntu
больше 7 лет назад

Nullsoft Scriptable Install System (NSIS) before 2.49 uses temporary folder locations that allow unprivileged local users to overwrite files. This allows a local attack in which either a plugin or the uninstaller can be replaced by a Trojan horse program.

CVSS3: 5.5
nvd
больше 7 лет назад

Nullsoft Scriptable Install System (NSIS) before 2.49 uses temporary folder locations that allow unprivileged local users to overwrite files. This allows a local attack in which either a plugin or the uninstaller can be replaced by a Trojan horse program.

CVSS3: 5.5
github
больше 3 лет назад

Nullsoft Scriptable Install System (NSIS) before 2.49 uses temporary folder locations that allow unprivileged local users to overwrite files. This allows a local attack in which either a plugin or the uninstaller can be replaced by a Trojan horse program.

EPSS

Процентиль: 13%
0.00042
Низкий