4 ms·

Local Privilege Escalation via MSI Installer

• byteknight 2y ago
  This is way too broad of a title. Title taken from their page: > Local Privilege Escalation via MSI installer in SoftMaker Office / FreeOffice I despise click bait.
  • jonathanlydall 2y ago
    It was probably shortened by HN automatically, but submitter should ideally have made efforts to improve it.
    • masfuerte 2y ago
      I tried to submit a story with a lengthy title a couple of days ago and HN refused to accept it until I'd cut it down. So it's probably the submitter's doing.
      • redbell 2y ago
        For reference, the max length of the title is 80 characters.
  • redbell 2y ago
    I totally agree that appending in SoftMaker Office to the title does change the meaning dramatically. it narrows down the vulnerability to a specific product that uses the MSI installer but not the MSI as a technology.
• deleted 2y ago
  [deleted]
• deleted 2y ago
  [deleted]
• RajT88 2y ago
  A lot of these types of exploits are out there because of the ability to run elevated (system) custom actions in the MSI. It is part of why MSFT says to vendors "Switch to MsiX".