The executable installer for Nullsoft Scriptable Install System suffers from DLL hijacking vulnerabilities.