CVE-2017-17069

CVE-2017-17069 describes a DLL hijacking vulnerability in Amazon Audible for Windows prior to November 2017, where an attacker can execute arbitrary code by placing a malicious dwmapi.dll file in the same directory as ActiveSetupN.exe. This vulnerability carries a high CVSS score of 7.8, indicating a significant impact with high confidentiality, integrity, and availability risks, though it requires user interaction and local access to exploit. Despite its severity, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.