CVE-2017-2156

Опубликовано: 28 апр. 2017

Источник: nvd

CVSS3: 7.8

CVSS2: 6.8

EPSS Низкий

Описание

Untrusted search path vulnerability in Vivaldi installer for Windows prior to version 1.7.735.48 allows an attacker to execute arbitrary code via a specially crafted executable file in an unspecified directory.

Ссылки

http://www.securityfocus.com/bid/98040
Third Party Advisory
VDB Entry
https://jvn.jp/en/jp/JVN71572107/index.html
Third Party Advisory
VDB Entry
https://vivaldi.com/security/vulnerability-disclosure-vivaldi-installer-for-windows-could-run-arbitrary-downloaded-code-jvn71572107/
Patch
Vendor Advisory
http://www.securityfocus.com/bid/98040
Third Party Advisory
VDB Entry
https://jvn.jp/en/jp/JVN71572107/index.html
Third Party Advisory
VDB Entry
https://vivaldi.com/security/vulnerability-disclosure-vivaldi-installer-for-windows-could-run-arbitrary-downloaded-code-jvn71572107/
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:vivaldi:vivaldi_installer_for_windows:*:*:*:*:*:*:*:*

Версия до 1.7.735.46 (включая)

EPSS

Процентиль: 60%

0.00398

Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-426

Связанные уязвимости

GHSA-hmr2-87pr-xxxm