Unscored CVE-2017-6189 EUVD-2017-15254GHSA-g23g-ww4v-93qq

Untrusted search path vulnerability in Amazon Kindle for PC before 1.19 allows local users to execute arbitrary code and conduct DLL hijack…

Published Mar 15, 2017 · Updated Aug 5, 2024 · Assigned by mitre

Description

Untrusted search path vulnerability in Amazon Kindle for PC before 1.19 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL in the current working directory of the Kindle Setup installer.

References

96476 vdb-entry
20170228 CVE-2017-6189-Amazon Kindle for Windows mailing-list
http://packetstormsecurity.com/files/141366/Amazon-Kindle-DLL-Hijacking.html