CVE-2017-7327

2018-01-1800:00:00

yandex

www.cve.org

0.001 Low

EPSS

Percentile

27.4%

JSON

Yandex Browser installer for Desktop before 17.4.1 has a DLL Hijacking Vulnerability because an untrusted search path is used for dnsapi.dll, winmm.dll, ntmarta.dll, cryptbase.dll or profapi.dll.

CNA Affected

[
  {
    "product": "Yandex Browser for Desktop",
    "vendor": "Yandex N.V.",
    "versions": [
      {
        "status": "affected",
        "version": "All versions prior to version 17.4.1"
      }
    ]
  }
]

References

browser.yandex.com/security/changelogs/fixed-in-version-17-4

0.001 Low

EPSS

Percentile

27.4%

JSON

Related for CVELIST:CVE-2017-7327