Описание
Flexera Macrovision InstallShield before 2008 sends a digital-signature password to an unintended application during certain signature operations involving .spc and .pvk files, which might allow local users to obtain sensitive information via unspecified vectors, related to an incorrect interaction between InstallShield and Signcode.exe.
Ссылки
Уязвимые конфигурации
Конфигурация 1Версия до 1.0 (включая)Версия до 2.0 (включая)Версия до 3.0 (включая)Версия до 12 (включая)
Одно из
cpe:2.3:a:flexerasoftware:installshield:*:*:*:*:*:*:*:*
cpe:2.3:a:flexerasoftware:installshield:*:*:*:*:*:*:*:*
cpe:2.3:a:flexerasoftware:installshield:*:*:*:*:*:*:*:*
cpe:2.3:a:flexerasoftware:installshield:*:*:*:*:*:*:*:*
cpe:2.3:a:flexerasoftware:installshield:10.5:*:*:*:*:*:*:*
cpe:2.3:a:flexerasoftware:installshield:11:*:*:*:*:*:*:*
cpe:2.3:a:flexerasoftware:installshield:11.5:*:*:*:*:*:*:*
EPSS
Процентиль: 18%
0.00057
Низкий
2.1 Low
CVSS2
Дефекты
CWE-200
Связанные уязвимости
github
почти 4 года назад
Flexera Macrovision InstallShield before 2008 sends a digital-signature password to an unintended application during certain signature operations involving .spc and .pvk files, which might allow local users to obtain sensitive information via unspecified vectors, related to an incorrect interaction between InstallShield and Signcode.exe.
EPSS
Процентиль: 18%
0.00057
Низкий
2.1 Low
CVSS2
Дефекты
CWE-200