Описание
An issue was found in the Evernote client for Windows 10, 7, and 2008 in the protocol handler. This enables attackers for arbitrary command execution if the user clicks on a specially crafted URL. AKA: WINNOTE-19941.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одновременно
Одно из
cpe:2.3:a:evernote:evernote:6.17.7:*:*:*:*:windows:*:*
cpe:2.3:a:evernote:evernote:6.18:beta2:*:*:*:windows:*:*
Одно из
cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:*:*:*:*
EPSS
Процентиль: 64%
0.00467
Низкий
8.8 High
CVSS3
6.8 Medium
CVSS2
Дефекты
CWE-77
Связанные уязвимости
github
больше 3 лет назад
An issue was found in the Evernote client for Windows 10, 7, and 2008 in the protocol handler. This enables attackers for arbitrary command execution if the user clicks on a specially crafted URL. AKA: WINNOTE-19941.
EPSS
Процентиль: 64%
0.00467
Низкий
8.8 High
CVSS3
6.8 Medium
CVSS2
Дефекты
CWE-77