CVE-2017-7327

Yandex Browser installer for Desktop before 17.4.1 has a DLL Hijacking Vulnerability because an untrusted search path is used for dnsapi.dll, winmm.dll, ntmarta.dll, cryptbase.dll or profapi.dll.

Score

CVSS 3.0 7.8 High

Status

Modified - browser-security@yandex-team.ru

Published

2018-01-19

Last modified

2024-09-16

Weaknesses

CWE-426

Affected products

• Yandex Browser (Yandex)
• Yandex Browser For Desktop (Yandex N.v.)

References

• https://browser.yandex.com/security/changelogs/fixed-in-version-17-4