CVE-2024-24810 WiX is vulnerable to DLL redirection attacks that allow the attacker to escalate privileges
Attackers can escalate privileges via DLL redirection in the WiX toolset's temporary folder, affecting installers built with this framework.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2024-24810?
CVE-2024-24810 is a high-severity vulnerability in wixtoolset issues, published on 7 Feb 2024. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
WiX toolset lets developers create installers for Windows Installer, the Windows installation engine. The .be TEMP folder is vulnerable to DLL redirection attacks that allow the attacker to escalate privileges. This impacts any installer built with the WiX installer framework. This issue has been patched in version 4.0.4.
Weakness: CWE-426
Which versions are affected by CVE-2024-24810?
4 open source packages ship an affected version, including wix. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
wix NuGet | All versions | 3.14.0 |
wix NuGet | All versions | 3.14.0 |
wix NuGet | From 4.0.0 | 4.0.4 |
wix NuGet | From 4.0.0 | 4.0.4 |
Products include Firegiant Wix Toolset.
How do I fix CVE-2024-24810?
Upgrade wix to a fixed version for your release line: 3.14.0 or 4.0.4.
Is CVE-2024-24810 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-24810 exists.
Other vulnerabilities in wixtoolset issues
Sources
Also known as GHSA-7wh2-wxc7-9ph5.