PT-2016-3439 · Flexera+1 · Flexera Installshield+1

Published 2016-02-24 · Updated 2025-12-05 · CVE-2016-2542

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Flexera InstallShield through 2015 SP1 AVEVA Edge InstallShield (affected versions not specified)

Description The issue is related to an untrusted search path vulnerability that allows local users to gain privileges via a Trojan horse DLL in the current working directory of a setup-launcher executable file. It is also associated with the possibility of substituting a dynamic library, which can allow an attacker to execute arbitrary code or elevate their privileges.

Recommendations For Flexera InstallShield through 2015 SP1: Update to a version later than 2015 SP1 to resolve the issue. For AVEVA Edge InstallShield: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Uncontrolled Search Path Element

Weakness Enumeration

CWE-20

CWE-427

Related Identifiers

BDU:2022-07235

CVE-2016-2542

Affected Products

Aveva Edge Installshield

Flexera Installshield

References · 12

• https://osv.dev/vulnerability/CVE-2016-2542 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-07235 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2016-2542 · Security Note
• https://oracle.com/security-alerts/cpuApr2021.html · Note
• https://tenable.com/security/tns-2019-08 · Note
• https://aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2022-006.pdf · Note
• https://cisa.gov/uscert/ics/advisories/icsa-22-326-01 · Note
• https://twitter.com/syedaquib77/status/1996822203526963666 · Twitter Post
• https://flexeracommunity.force.com/customer/articles/INFO/Best-Practices-to-Avoid-Windows-Setup-Launcher-Executable-Issues · Note
• http://securityfocus.com/bid/84213 · Note
• https://us-cert.cisa.gov/ics/advisories/icsa-20-287-03 · Note
• http://securitytracker.com/id/1035097 · Note