Not rated
CVE-2021-22038 On Windows, the uninstaller binary copies itself to a fixed temporary location, which is then executed (the originally…
Description
On Windows, the uninstaller binary copies itself to a fixed temporary location, which is then executed (the originally called uninstaller exits, so it does not block the installation directory). This temporary location is not randomized and does not restrict access to Administrators only so a potential attacker could plant a binary to replace the copied binary right before it gets called, thus gaining Administrator privileges (if the original uninstaller was executed as Administrator). The vulnerability only affects Windows installers.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware InstallBuilder | Versions not published |
Other CVEs of VMware InstallBuilder
The 4 CVEs of VMware InstallBuilder →
CVE-2022-31694
InstallBuilder Qt installers built with versions previous to 22.10 try to load DLLs from the installer binary parent…
7.3
High
CVE-2021-22037
Under certain circumstances, when manipulating the Windows registry, InstallBuilder uses the reg.exe system command
Not rated
CVE-2020-3979
InstallBuilder for Qt Windows (versions prior to 20.7.0) installers look for plugins at a predictable location at…
Not rated