PT-2017-14696

CVE-2017-17069

·

Published

2017-12-06

·

Updated

2017-12-20

Description by

CVSS 2.0
9.3
High
MetricsAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Amazon Audible for Windows versions prior to November 2017
Description The issue allows attackers to execute arbitrary DLL code. This can happen when ActiveSetupN.exe is launched from a directory where an attacker has already created a Trojan horse dwmapi.dll file.
Recommendations For Amazon Audible for Windows versions prior to November 2017, update to a version released after November 2017 to resolve the issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾