CVE-2017-17069

ActiveSetupN.exe in Amazon Audible for Windows before November 2017 allows attackers to execute arbitrary DLL code if ActiveSetupN.exe is launched from a directory where an attacker has already created a Trojan horse dwmapi.dll file...

CVE-2017-17069

ActiveSetupN.exe in Amazon Audible for Windows before November 2017 allows attackers to execute arbitrary DLL code if ActiveSetupN.exe is launched from a directory where an attacker has already created a Trojan horse dwmapi.dll file...

CVE-2017-17069

ActiveSetupN.exe in Amazon Audible for Windows prior to November 2017 is vulnerable to DLL hijacking: if the executable is started from a directory where an attacker has placed a malicious dwmapi.dll, an arbitrary DLL can be loaded, enabling code execution. Root cause: improper DLL loading by Act...

Amazon Audible DLL Hijacking

Aloha, Introduction: Vendor: Amazon Affected Product: Audible Software for Windows PC Fixed in: Latest Version released by the vendor Vendor Website: https://www.audible.com/ Vulnerability Type: Privilege Escalation CVE: CVE-2017-17069 Credit: Himanshu Mehta @LionHeartRoxx Summary: Audible contai...