Back to search
CVE-2020-3979
Published: Sep 18, 2020
Modified: Aug 4, 2024
PUBLISHED
Description
InstallBuilder for Qt Windows (versions prior to 20.7.0) installers look for plugins at a predictable location at initialization time, writable by non-admin users. While those plugins are not required, they are loaded if present, which could allow an attacker to plant a malicious library which could result in code execution with the security scope of the installer.
| Vendor | Product | Versions |
|---|---|---|
n/a | VMware InstallBuilder | affected All InstallBuilder for Qt versions prior to version 20.7.0 |
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now