CVE-2017-6189

Severity: high (CVSS 7.3 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-03-15 · updated 2026-06-17
Weakness: CWE-426

Description

Untrusted search path vulnerability in Amazon Kindle for PC before 1.19 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL in the current working directory of the Kindle Setup installer.

Affected products

Amazon Kindle For Pc: through 1.17.44183

References

http://packetstormsecurity.com/files/141366/Amazon-Kindle-DLL-Hijacking.html
http://seclists.org/fulldisclosure/2017/Feb/71
http://www.securityfocus.com/bid/96476
http://packetstormsecurity.com/files/141366/Amazon-Kindle-DLL-Hijacking.html
http://seclists.org/fulldisclosure/2017/Feb/71
http://www.securityfocus.com/bid/96476

Get alerted when CVE-2017-6189 or the next vulnerability affects your stack