InnoSetup Installer 5.5.9 uncontrolled search path 🚫 [False Positive]

Noticeinfo

⚠️ Further investigation has shown that this issues is a false-positive. Please review the sources mentioned and consider not using this entry at all. The sole source documents PE-format conformance defects in innosetup-5.5.9.exe with no exploit, attack path, or untrusted search path condition (CWE-426/427), and the author states Windows loads these files normally; the record's remote/exploited claims are unsupported, as is the product maintainer's contention.

Productinfo

Vendor

• InnoSetup

Name

• Installer

Version

• 5.5.9

Timelineinfo

02/25/2017 🔍
03/06/2017 +9 days 🔍
03/06/2017 +0 days 🔍
03/11/2017 +5 days 🔍
09/30/2026 +3490 days 🔍

Sourcesinfo

Advisory: Executable installers are defective^WEVIL (case 2): innosetup-5.5.9.exe and innosetup-5.5.9-unicode.exe
False Positive: Yes
Disputed: 🔍

CVE: CVE-2017-20051 (🔍)
GCVE (CVE): GCVE-0-2017-20051
GCVE (VulDB): GCVE-100-97837
scip Labs: https://www.scip.ch/en/?labs.20161013

Entryinfo

Created: 03/11/2017 08:33
Updated: 09/30/2026 19:41
Changes: 03/11/2017 08:33 (43), 08/28/2020 12:27 (1), 06/08/2022 09:12 (12), 09/29/2026 08:01 (16), 09/29/2026 09:07 (49), 09/30/2026 19:41 (4)
Complete: 🔍
Cache ID: 216::103

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion

Want to stay up to date on a daily basis?

Enable the mail alert feature now!