CNNVD-202510-3990 Information

CNNVD ID

CNNVD-202510-3990

CVE-2024-14012

  • CNNVD Published: 2025-10-29

Description (Chinese)

Revenera InstallShield(Flexera InstallShield)是Revenera公司的一个开发包。用于构建 Windows 安装程序和 MSIX 软件包。 Revenera InstallShield 2023 R1版本存在安全漏洞,该漏洞源于MPR.dll从不安全位置加载,可能导致权限提升。

Description (English)

Revenera Install Shield (Flexera Install Shield) is a development package for Revera. For the construction of Windows Installer and MSIX packages. Revenera Install Shield version 2023 R1 contains a security loophole that originates from the MPR.dll loading from unsafe locations, which may lead to increased access.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

Revenera

Published

2025-10-29

Last Modified

2026-02-24

References

https://community.revenera.com/s/article/CVE-2024-14012-Potential-Privilege-Escalation-in-InstallShield-2023-R1 https://access.redhat.com/security/cve/cve-2024-14012

Patch

https://community.revenera.com/s/downloads-page

Share on: