Skip to content

Nessus reports vulnerability "Microsoft Windows Unquoted Service Path Enumeration" #6165

@Ekopalypse

Description

@Ekopalypse

Opened on behalf of this forum post

The installer doesn’t quote the uninstall string appropriately.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Notepad++\UninstallString is

C:\Program Files\Notepad++\uninstall.exe

when it should be

“C:\Program Files\Notepad++\uninstall.exe”

And similarly in wow64node for 32-bit version.
Can you please tweak the installer to quote this so that people don’t have to waste time “remediating” this?

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions