CVE-2019-9896: High severity putty vulnerability
In PuTTY versions before 0.71 on Windows, local attackers could hijack the application by putting a malicious help file in the same directory as the executable.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-9896?
CVE-2019-9896 is a vulnerability in PuTTY versions before 0.71 on Windows that allows local attackers to hijack the application by placing a malicious help file in the same directory as the executable.
What is the severity of CVE-2019-9896?
CVE-2019-9896 has a severity value of 7.8, which is considered high.
What software versions are affected by CVE-2019-9896?
PuTTY versions before 0.71 on Windows are affected by CVE-2019-9896.
How can this vulnerability be exploited?
This vulnerability can be exploited by local attackers placing a malicious help file in the same directory as the PuTTY executable.
Are there any references available for CVE-2019-9896?
Yes, you can refer to the following sources for more information: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00004.html, http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00020.html, https://security.netapp.com/advisory/ntap-20190404-0001/