Design/Logic Flaw

2012-01-1919:55:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

Flexera Macrovision InstallShield before 2008 sends a digital-signature password to an unintended application during certain signature operations involving .spc and .pvk files, which might allow local users to obtain sensitive information via unspecified vectors, related to an incorrect interaction between InstallShield and Signcode.exe.

CPENameOperatorVersion
installshieldeq10.5
installshieldle12
installshieldeq11.5
installshieldle1.0
installshieldeq11
installshieldle3.0
installshieldle2.0

Name	Operator	Version
installshield	eq	10.5
installshield	le	12
installshield	eq	11.5
installshield	le	1.0
installshield	eq	11
installshield	le	3.0
installshield	le	2.0

References

kb.flexerasoftware.com/selfservice/microsites/search.do?cmd=displayKC&docType=kc&externalId=Installation-InstallShield-InstallShield2008Premier-Public-ProductInfo-IS2008PremProReleaseNotes2pdf&sliceId=pdfPage_42