CVE-2016-4900

Опубликовано: 22 мая 2017

Источник: nvd

CVSS3: 7.8

CVSS2: 6.8

EPSS Низкий

Описание

Untrusted search path vulnerability in Evernote for Windows versions prior to 6.3 allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory.

Ссылки

http://jvndb.jvn.jp/jvndb/JVNDB-2016-000206
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/93572
Third Party Advisory
VDB Entry
https://evernote.com/security/updates/#win
Vendor Advisory
https://jvn.jp/en/jp/JVN03251132/index.html
Third Party Advisory
VDB Entry
http://jvndb.jvn.jp/jvndb/JVNDB-2016-000206
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/93572
Third Party Advisory
VDB Entry
https://evernote.com/security/updates/#win
Vendor Advisory
https://jvn.jp/en/jp/JVN03251132/index.html
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:evernote:evernote:*:*:*:*:*:windows:*:*

Версия до 6.2.1 (включая)

EPSS

Процентиль: 62%

0.00423

Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-426

Связанные уязвимости

GHSA-fm94-qrgp-p6gf