Greenshot Installer Opens Browser in SYSTEM Context when Installed via ConfigMgr or other Admin tools
Description
The setup.iss includes a [Run] section which starts the software as well as the browser and navigates it to the release notes page. If the installer is run silently, launching the browser in this context launches it as SYSTEM. This means that the browser has full administrative rights to the computer.
I would suggest adjusting the [Run] section in the setup.iss file to not launch the browser if running the install silently by adding the "skipifsilent" flag to that step:
Current:
Fixed:
Environment
Windows 10, Installing Greenshot in the SYSTEM context (as many computer management software like ConfigMgr and Intune does), can easily be reproduced using the tool psexec as well.
The setup.iss includes a [Run] section which starts the software as well as the browser and navigates it to the release notes page. If the installer is run silently, launching the browser in this context launches it as SYSTEM. This means that the browser has full administrative rights to the computer.
I would suggest adjusting the [Run] section in the setup.iss file to not launch the browser if running the install silently by adding the "skipifsilent" flag to that step:
Current:
Fixed: