CVE-2017-17069 - ActiveSetupN.exe in Amazon Audible for Windows before November 2017 allows attackers to execute arbitrary DLL code if ActiveSetupN.exe is launched from a directory where an attacker has already created a Trojan horse dwmapi.dll file

Back Back to CVE browser

HIGH

ActiveSetupN.exe in Amazon Audible for Windows before November 2017 allows attackers to execute arbitrary DLL code if ActiveSetupN.exe is launched from a directory where an attacker has already created a Trojan horse dwmapi.dll file

Published Dec 6, 2017

7.8

HIGH

CVSS 3.0

EPSS 1.65%

Description

ActiveSetupN.exe in Amazon Audible for Windows before November 2017 allows attackers to execute arbitrary DLL code if ActiveSetupN.exe is launched from a directory where an attacker has already created a Trojan horse dwmapi.dll file.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-426

References (3)

http://www.securityfocus.com/bid/102044
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://packetstormsecurity.com/files/145202/Amazon-Audible-DLL-Hijacking.html
x_refsource_MISCIssue TrackingThird Party AdvisoryVDB Entry
https://twitter.com/LionHeartRoxx/status/936338288314540032
x_refsource_MISCIssue TrackingThird Party Advisory

Link	Providers	Tags
http://www.securityfocus.com/bid/102044		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://packetstormsecurity.com/files/145202/Amazon-Audible-DLL-Hijacking.html		x_refsource_MISCIssue TrackingThird Party AdvisoryVDB Entry
https://twitter.com/LionHeartRoxx/status/936338288314540032		x_refsource_MISCIssue TrackingThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Dec 6, 2017

Updated Aug 5, 2024

Reserved Nov 30, 2017

Link CVE-2017-17069

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2017-17069

Red Hat

Severity n/a

Public date n/a

Links CVE-2017-17069