Nullsoft Scriptable Install System: Difference between revisions

Revision as of 21:12, 25 April 2024

Revision as of 06:53, 26 April 2024

Line 9:

The source code of NSIS and the downloads are offered through [[SourceForge]], where NSIS was awarded ''Project of the Month'' in January 2006.

NSIS itself consists only of a [[Command-line interface|command-line]] compiler and a [[Graphical user interface|graphical user interface]] for the compiler, which aids in compiling and simplifies some settings. However, several [[Free software|free]]other [[Integrated#third-party development environment|IDEsfront-ends]] for NSIS are available. The most comprehensive one currently is EclipseNSIS, a [[Plug-in (computing)|plug-in]] for the cross-platform, also free, [[Eclipse (software)|Eclipse IDE]].

When using NSIS in software products, it is not possible to obtain a certification from Microsoft as "Designed for Windows Vista" because NSIS is not capable of generating the necessary Windows Installer files.

Line 54:

Installers created with NSIS have security vulnerabilities when an outdated version is used.<ref>FullDisclosure: [http://seclists.org/fulldisclosure/2015/Dec/32 Executable installers are vulnerable^WEVIL (case 2): NSIS allows remote code execution with escalation of privilege]</ref><ref>FullDisclosure: [http://seclists.org/fulldisclosure/2015/Oct/109 Arbitrary code execution resp. escalation of privilege with Mozilla's SETUP.EXE]</ref><ref>FullDisclosure: [http://seclists.org/fulldisclosure/2015/Dec/74 Executable installers are vulnerable^WEVIL (case 10): McAfee Security Scan Plus, WebAdvisor and CloudAV (Beta)]</ref><ref>FullDisclosure: [http://seclists.org/fulldisclosure/2015/Dec/75 Executable installers are vulnerable^WEVIL (case 11): Nmap <7.01 and Nmap-WinPcap <4.13]</ref><ref>Gpg4win: [https://www.gpg4win.org/news-20151125.html Security Advisory Gpg4win 2015-11-25]</ref><ref>Intel: [https://service.mcafee.com/FAQDocument.aspx?lc=1033&id=TS102462 Intel Security – Security Bulletin: Security patch for several McAfee installers and uninstallers]</ref>

Possible security vulnerabilities were closed in versions 2.47<ref>[http://nsis.sourceforge.net/Docs/AppendixF.html#v2.47 Appendix F: Changelog and Release Notes]</ref>, 2.50<ref>[http://nsis.sourceforge.net/Docs/AppendixF.html#v2.50 Appendix F: Changelog and Release Notes]</ref>, and 2.51<ref>[http://nsis.sourceforge.net/Docs/AppendixF.html#v2.51 Appendix F: Changelog and Release Notes]</ref>.

==Third-party front-ends==

Creation of NSIS installers is supported by several pieces of third-party software:

- The [[CMake] packager CPack has a generator backend for NSIS.<ref>https://cmake.org/cmake/help/latest/cpack_gen/nsis.html</ref>

- EclipseNSIS is a comprehensive plugin for [[Eclipse (software)|Eclipse]] for editing, compiling and testing NSIS scripts.<ref>https://eclipsensis.sourceforge.net/index.shtml</ref>

- HM NIS EDIT is a free-standing [[integrated development environment]] (IDE) for NSIS.<ref>https://hmne.sourceforge.net</ref>

- [[Debian]] has an nsis package for creationg Windows installers under Linux.<ref>https://packages.debian.org/sid/nsis</ref>

== References ==

<references />

Line 60 ⟶ 69:

* [https://nsis.sourceforge.io/Main_Page NSIS Homepage]

* [http://sourceforge.net/projects/nsis/ NSIS Download] via SourceForge

* [http://eclipsensis.sourceforge.net/ EclipseNSIS IDE] – Eclipse plugin for NSIS

* [http://hmne.sourceforge.net/ HM NIS EDIT IDE] – graphical editor for NSIS