Security Advisory
CVE-2015-9267
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Nullsoft Scriptable Install System (NSIS) before 2.49 uses temporary folder locations that allow unprivileged local users to overwrite files. This allows a local attack in which either a plugin or the uninstaller can be replaced by a Trojan horse program.