Description
Flexera Macrovision InstallShield before 2008 sends a digital-signature password to an unintended application during certain signature operations involving .spc and .pvk files, which might allow local users to obtain sensitive information via unspecified vectors, related to an incorrect interaction between InstallShield and Signcode.exe.
References (1)
Core 1
Scores
EPSS
0.0033
EPSS Percentile
24.8%
Details
CWE
CWE-200
Status
published
Products (4)
flexerasoftware/installshield
10.5
flexerasoftware/installshield
11
flexerasoftware/installshield
11.5
flexerasoftware/installshield
< 1.0
Published
Jan 19, 2012
Tracked Since
Feb 18, 2026