DLL Redirection Attacks Affect WiX Installer Framework

CVE-2024-24810

What is CVE-2024-24810?

The WiX Toolset installer framework is susceptible to DLL redirection attacks due to vulnerabilities present in the .be TEMP folder. This allows attackers to exploit unpatched installers built with WiX, potentially leading to unauthorized privilege escalation during the installation process. Users of the WiX Toolset should upgrade to version 4.0.4 or later to mitigate this security risk and ensure their installers remain secure against exploitation.

References