CVE-2019-5530

Windows binaries generated with InstallBuilder versions earlier than 19.7.0 are vulnerable to tampering even if they contain a valid Authenticode signature.

Score

CVSS 3.0 7.8 High

Status

Modified - security@vmware.com

Published

2019-08-29

Last modified

2024-08-04

Affected products

• Installbuilder (Bitrock)

References

• https://blog.bitrock.com/2019/08/installer-tampering-while-preserving.html