CVE-2016-6167: High severity Putty PuTTY vulnerability
Published Jan 30, 2017
·Updated
Multiple untrusted search path vulnerabilities in Putty beta 0.67 allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse (1) UxTheme.dll or (2) ntmarta.dll file in the current working directory.
Affected Software
1 affected component
Putty PuTTY=0.67-beta
Event History
Jan 30, 2017
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Data Sourced
via NVD·10:59 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2016-6167?
CVE-2016-6167 is considered a high-severity vulnerability due to its potential for execution of arbitrary code.
2
How do I fix CVE-2016-6167?
To fix CVE-2016-6167, users should update to a stable version of PuTTY that does not incorporate these vulnerabilities.
3
Who is affected by CVE-2016-6167?
Local users running PuTTY beta version 0.67 are affected by CVE-2016-6167.
4
What type of attacks can CVE-2016-6167 facilitate?
CVE-2016-6167 can facilitate DLL hijacking attacks, allowing unauthorized execution of code.
5
Can CVE-2016-6167 be exploited remotely?
No, CVE-2016-6167 requires local access to the system to exploit the untrusted search path vulnerabilities.