High severity · published Jan 30, 2025
CVE-2023-29080
Privilege escalation in InstallShield
8.5
CVSS
0.2%
EPSS
No
On KEV
Description
Potential privilege escalation vulnerability in Revenera InstallShield versions 2022 R2 and 2021 R2 due to adding InstallScript custom action to a Basic MSI or InstallScript MSI project extracting few binaries to a predefined writable folder during installation time. The standard user account has write access to these files and folders, hence replacing them during installation time can lead to a DLL hijacking vulnerability.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 6% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IN
InstallShield · Revenera
2022 R2 before 2022 R2 (28.0.0.763); 2021 R2 before 2021 R2 (27.0.0.126) · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-29080
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-29080
community.revenera.com
https://community.revenera.com/s/article/cve-2023-29080-security-patch-for-the-possible-privileged-escalation-scenarios-identified-in-installshield-nbsp
More from InstallShield
7.3
CVE-2024-14012
Potential Privilege Escalation in Revenera InstallShield 2023 R1
7.3
CVE-2024-7562
A potential elevated privilege issue has been reported with InstallShield built Standalone MSI setups having multiple InstallScript custom actions configured
5.6
CVE-2025-12418
Potential Denial of Service in Supported Versions of Revenera InstallShield
5.5
CVE-2023-29081
InstallShield Symlink Vulnerability Affecting Suite Project Setups
–
CVE-2007-5661
The Macrovision InstallShield InstallScript One-Click Install (OCI) ActiveX control 12.0 before SP2 does not validate the DLL files that are named as parameters to the control,…