CVE-2024-38177

Published: Aug 13, 2024Modified: Aug 16, 2024

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: secure@microsoft.com (Secondary)

Description

Windows App Installer Spoofing Vulnerability

Affected (1)

Products: Microsoft: App Installer

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Microsoft App Installer	Before 1.22.11261.0

Related CWEs

Improper Encoding or Escaping of Output

The product prepares a structured message for communication with another component, but encoding or escaping of the data is either missing or done incorrectly. As a result, the intended structure of the message is not preserved.

References (1)

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38177

Source: secure@microsoft.com

PatchVendor Advisory

Timeline

No history available yet.