CVE-2017-2156 Untrusted search path vulnerability in Vivaldi installer for Windows prior to version 1.7.735.48 allows an attacker to execute arbitrary code via a specially crafted executable file in an unspecified....
HighCVSS 7.8
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Untrusted search path vulnerability in Vivaldi installer for Windows prior to version 1.7.735.48 allows an attacker to execute arbitrary code via a specially crafted executable file in an unspecified directory.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| vivaldi installer for windows | <= 1.7.735.46 | No fix listed |
| Vivaldi Technologies Vivaldi installer for Windows | = prior to version 1.7.735.48 | No fix listed |
References
- 98040 third-party-advisory vdb-entry
- JVN#71572107 third-party-advisory vdb-entry
- vivaldi.com patch vendor-advisory