CVE-2017-6189 in Kindle

摘要

由 MITRE

Untrusted search path vulnerability in Amazon Kindle for PC before 1.19 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL in the current working directory of the Kindle Setup installer.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• 预定: 2017-02-22
• 披露: 2017-03-15
• 管理: 已接受
• 条目: VDB-97341
• CPE: 准备好
• CWE: CWE-426 (已确认)
• CVSS: 7.3 (NVD)
• EPSS: 0.01199
• KEV: 否
• 活动: 非常低
• 部门: Lawfirm, Homeoffice

来源

• MITRE: https://www.cve.org/CVERecord?id=CVE-2017-6189
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2017-6189
• CVE Details: https://www.cvedetails.com/cve/CVE-2017-6189/