---
id: CVE-2017-20051
title: 'Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER'
summary: >-
  Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs:
  none. Reason: This candidate was withdrawn by its CNA. Further investigation
  showed that it was not a security issue. Notes: The sole source documents
  PE-format …
severity: medium
cvss: 6.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L'
cwe:
  - CWE-426
  - CWE-427
vendor: jrsoftware
product: inno_setup
affected:
  - inno_setup
published: '2022-06-16'
updated: '2026-09-30'
sourceUpdated: '2026-09-30T18:17:17.283'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2017-20051'
references:
  - url: 'http://seclists.org/fulldisclosure/2017/Mar/8'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/cve/CVE-2017-20051'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/vuln/97837'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/vuln/97837/cti'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/?id.97837'
    label: af854a3a-2127-422b-91ae-364da2661108
tags:
  - nvd
  - cve.org
  - exploit-available
epss: 0.0075
epssPercentile: 0.53195
exploitAvailable: true
ssvc:
  exploitation: poc
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2025-04-14T17:11:18.734072Z'
cvssSource: nvd
ingestedAt: '2026-09-29T06:28:45.420Z'
---

## Overview

Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: The sole source documents PE-format conformance defects in innosetup-5.5.9.exe with no exploit, attack path, or untrusted search path condition (CWE-426/427), and the author states Windows loads these files normally; the record's remote/exploited claims are unsupported, as is the product maintainer's contention.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.