GHSA-g4v6-69p6-q3p4: WiX Burn-based bundles are vulnerable to binary hijack when run as SYSTEM

March 25, 2024

Burn uses an unprotected C:\Windows\Temp directory to copy binaries and run them from there. This directory is not entirely protected against low privilege users.

References

github.com/advisories/GHSA-g4v6-69p6-q3p4
github.com/nirbar/wix4
github.com/nirbar/wix4/commit/0410df93a5f29e4235b4b78b90a1384ffafd062b
github.com/nirbar/wix4/security/advisories/GHSA-g4v6-69p6-q3p4

Code Behaviors & Features

Detect and mitigate GHSA-g4v6-69p6-q3p4 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →