Unscored CVE-2017-7327 EUVD-2017-16354GHSA-p586-mfg5-f272

Yandex Browser installer for Desktop before 17.4.1 has a DLL Hijacking Vulnerability because an untrusted search path is used for dnsapi.dl…

Published Jan 19, 2018 · Updated Sep 16, 2024 · Assigned by yandex

Vendor: Yandex N.V. Product: Yandex Browser for Desktop

Description

Yandex Browser installer for Desktop before 17.4.1 has a DLL Hijacking Vulnerability because an untrusted search path is used for dnsapi.dll, winmm.dll, ntmarta.dll, cryptbase.dll or profapi.dll.

Affected products

Vendor	Product	Affected	Fixed
Yandex N.V.	Yandex Browser for Desktop	All versions prior to version 17.4.1	—

References

https://browser.yandex.com/security/changelogs/fixed-in-version-17-4