msiexec repair mode can resolve source paths from user-writable installer directories
A DEV Community article explains how Windows Installer's repair operation restores missing or modified files using source locations recorded in the installation database. When original media is unavailable, msiexec may fall back to cached package data or directories derived from the installation context. The author notes that per-user installs write into user-writable profile directories, while per-machine installs typically use administrative resolution paths. The piece advises checking whether affected products run services or tasks as SYSTEM and verifying resulting paths after deployment. It stresses that exploitability depends on each product's component registration, install scope, and source directory permissions, and makes no claim about any specific vendor.
This is an AI-generated summary. ShortSingh links to the original source for the complete article.
Discussion (0)
Log in to join the discussion and vote.
Log in