CVE-2016-4900
Untrusted search path vulnerability in Evernote for Windows versions prior to 6.3 allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory.
- Score
- CVSS 3.0 7.8 High
- Status
- Modified - vultures@jpcert.or.jp
- Published
- 2017-05-22
- Last modified
- 2024-08-06
- Weaknesses
- CWE-426
Affected products
References
- http://jvndb.jvn.jp/jvndb/JVNDB-2016-000206
- http://www.securityfocus.com/bid/93572
- https://evernote.com/security/updates/#win
- https://jvn.jp/en/jp/JVN03251132/index.html
