In PuTTY versions before 0.71 on Windows, local attackers could hijack the application by putting a malicious help file in the same directory as the executable.
References
Link | Resource |
---|---|
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00004.html | Mailing List Third Party Advisory |
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00020.html | Mailing List Third Party Advisory |
https://security.netapp.com/advisory/ntap-20190404-0001/ | Third Party Advisory |
https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html | Release Notes Third Party Advisory |
Configurations
History
No history.
Information
Published : 2019-03-21 16:01
Updated : 2024-02-28 17:08
NVD link : CVE-2019-9896
Mitre link : CVE-2019-9896
CVE.ORG link : CVE-2019-9896
JSON object : View
Products Affected
opensuse
- leap
- backports_sle
putty
- putty
microsoft
- windows
CWE
CWE-427
Uncontrolled Search Path Element