Nullsoft Scriptable Install System (NSIS) before 2.49 uses temporary folder locations that allow unprivileged local users to overwrite files. This allows a local attack in which either a plugin or the uninstaller can be replaced by a Trojan horse program.
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Nullsoft_scriptable_install_system | Nullsoft | * | 2.49 (excluding) |
| Nsis | Ubuntu | trusty | * |
| Nsis | Ubuntu | trusty/esm | * |
| Nsis | Ubuntu | upstream | * |