high8.1
CVE-2022-27438
Caphyon Ltd Advanced Installer 19.3 and earlier and many products that use the updater from Advanced Installer (Advanced Updater) are affected by a remote code…
Impact
Caphyon Ltd Advanced Installer 19.3 and earlier and many products that use the updater from Advanced Installer (Advanced Updater) are affected by a remote code execution vulnerability via the CustomDetection parameter in the update check function. To exploit this vulnerability, a user must start an affected installation to trigger the update check.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Caphyon | Advanced Installer | before 19.4 |
| 3cx | Call Flow Designer | Version 18.2.13 |
| 3cx | Crm Template Generator | Version 2.1.23 |
| Boom | Boomtv Streamer Portal | Version 2.2.1 |
| Codesector | Direct Folders | Version 4.0 |
| Codesector | Teracopy | Version 3.8.5 |
| Emeditor | Emeditor | Version 21.3.0 |
| Flamory | Flamory | Version 4.2.19.0 |
| Freesnippingtool | Free Snipping Tool | Version 5.6.0.0 |
| Fxsound | Fxsound | Version 1.1.12.0 |
| Gainedge | Better Explorer | Version 2020.3.15.1304 |
| Gamecaster | Gamecaster | Version 4.0.2109.2802 |