Unscored CVE-2016-4900 EUVD-2016-5876GHSA-fm94-qrgp-p6gf

Untrusted search path vulnerability in Evernote for Windows versions prior to 6.3 allows remote attackers to gain privileges via a Trojan h…

Published May 22, 2017 · Updated Aug 6, 2024 · Assigned by jpcert

Vendor: Evernote Product: Evernote for Windows Platform: Windows

Description

Untrusted search path vulnerability in Evernote for Windows versions prior to 6.3 allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory.

Affected products

Vendor	Product	Affected	Fixed
Evernote	Evernote for Windows	versions prior to 6.3	—

References

JVN#03251132 third-party-advisory
JVNDB-2016-000206 third-party-advisory
93572 vdb-entry
https://evernote.com/security/updates/#win