Filtered by vendor Revenera Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2007-5661 1 Revenera 1 Installshield 2025-08-01 N/A
The Macrovision InstallShield InstallScript One-Click Install (OCI) ActiveX control 12.0 before SP2 does not validate the DLL files that are named as parameters to the control, which allows remote attackers to download arbitrary library code onto a client machine.
CVE-2023-29080 1 Revenera 1 Installshield 2025-02-12 N/A
Potential privilege escalation vulnerability in Revenera InstallShield versions 2022 R2 and 2021 R2 due to adding InstallScript custom action to a Basic MSI or InstallScript MSI project extracting few binaries to a predefined writable folder during installation time. The standard user account has write access to these files and folders, hence replacing them during installation time can lead to a DLL hijacking vulnerability.