CVE-2015-9267 | BDVDB-2026-107549 Detail

Description#

Nullsoft Scriptable Install System (NSIS) before 2.49 uses temporary folder locations that allow unprivileged local users to overwrite files. This allows a local attack in which either a plugin or the uninstaller can be replaced by a Trojan horse program.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://lists.debian.org/debian-lts-announce/2018/11/msg00041.html
https://sourceforge.net/p/nsis/bugs/1125/
http://jvn.jp/en/jp/JVN68418039/index.html

Exploit#

No public exploit known

History#

Version 12018-10-01Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.