CVE-2024-29187 | WiX Toolset up to 3.14.0/4.0.4 on Windows Installer C:WindowsTemp permission assignment

A vulnerability was found in WiX Toolset up to 3.14.0/4.0.4 on Windows. It has been declared as critical. This vulnerability affects unknown code of the file C:WindowsTemp of the component Installer. The manipulation leads to incorrect permission assignment.

This vulnerability was named CVE-2024-29187. It is possible to launch the attack on the local host. There is no exploit available.

It is recommended to upgrade the affected component.