Windows binaries generated with InstallBuilder versions earlier than 19.7.0 are vulnerable to tampering even if they contain a valid Authenticode signature.
CVSS 3.0HIGH 7.8·Local·No auth·User interaction·EPSS 0.00943·Published 2019-08-29·Fixed in 19.7.0
A third-party installer generation tool, possibly BitRock InstallBuilder, as used in products including Process-one ejabberd 1.1.1_1 and earlier, generates an installer that allows local users to cause a denial of servic…