Releases86
Frequency2 weeks 5 days
Last Release
Stars832
***This is just a mirror of https://sf.net/projects/nsis -- please report issues there*** NSIS (Nullsoft Scriptable Install System) is a professional open source system to create Windows installers. It is designed to be as small and flexible as possible and is therefore very suitable for internet distribution.

CVE History

CVEPublishedCVSS v3CVSS v2
7.8 HIGH

NSIS (Nullsoft Scriptable Install System) 3.06.1 before 3.12 sometimes uses the Low IL temp directory when executing as SYSTEM, allowing local attackers to gain privileges (if they can cause my_GetTempFileName to return 0, as shown in the references).

5.3 MEDIUM

Nullsoft Scriptable Install System (NSIS) before 3.09 mishandles access control for an uninstaller directory.