CVE-2016-6167

Multiple untrusted search path vulnerabilities in Putty beta 0.67 allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse (1) UxTheme.dll or (2) ntmarta.dll file in the current working directory.

Published : 2017-01-30 22:59 Updated : 2018-10-09 20:00

4.4
CVSS Score More info
Score 4.4 / 10
4.4
Vendor Product Version URI
Simon Tatham Putty 0.67 cpe:/a:simon_tatham:putty:0.67:beta
  1. Simon Tatham (1) Search CVE
    1. Putty (1) Search CVE
      1. 0.67

CWE

ID Name Description Links
CWE-426 Untrusted Search Path The application searches for critical resources using an externally-supplied search path that can point to resources that are not under the application's direct control. CVE

History of changes