CVE-2024-24810

Summary

CVE-2024-24810 is a vulnerability affecting the WiX toolset, a software used by developers to create installers for Windows Installer. The issue resides in the .be TEMP folder's susceptibility to DLL redirection attacks. These attacks enable an adversary to hijack a DLL with a malicious version, leading to privilege escalation. This vulnerability affects installers constructed using the WiX installer framework. However, a patch has been released in version 4.0.4.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.