InstallShield Knowledge Base

CVE-2023-29080: Security patch for the possible privileged escalation scenarios identified in InstallShield

Summary Adding an InstallScript custom action to a Basic MSI or InstallScript MSI project extracts few binaries to a predefined writable folder during installation time. The standard user account has write access to these files and folders, hence re...

Varaprasad Level 6 Flexeran Jun 29, 2023

InstallShield 2021 R2 InstallShield 2022 R2

Featured Articles

Featured article

Summary Microsoft Defender Antivirus alerts triggered by false positive finding in ReleasePackager.exe utility. Users should update their Microsoft Defender Antivirus definitions to remove these alerts. Symptoms Microsoft Defender Antivirus is flagging InstallShield ReleasePackager.exe as containing malware [Trojan:Win32/NetSupportRat.CCC!MTB]. This is being reported against InstallShield versions 2022, 2021, and 2020. Microsoft confirmed the triggered alerts are a false positive finding and are updating their database to no longer flag ReleasePackager.exe. Please note while the ReleasePackager.exe file is quarantined in the interim, usage of InstallShield IDE should not be affected. The ReleasePackager.exe is a standalone utility and usage is typically limited; however, if you encounter issues with using the utility, reach out to Revenera Technical Support for assistance. The InstallShield team is working with Microsoft Defender to gather more details and minimize false positive triggers in the future. Fix Version and Resolution We advise updating your Microsoft Defender Antivirus definitions to the latest.

InstallShield Knowledge Base