Описание
Akeo Consulting Rufus 3.0 and earlier is affected by: DLL search order hijacking. The impact is: Arbitrary code execution WITH escalation of privilege. The component is: Executable installers, portable executables (ALL executables on the web site). The attack vector is: CAPEC-471, CWE-426, CWE-427.
Ссылки
- Mailing ListThird Party Advisory
- Mailing ListThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 3.0 (включая)
cpe:2.3:a:akeo:rufus:*:*:*:*:*:*:*:*
EPSS
Процентиль: 59%
0.00388
Низкий
7.8 High
CVSS3
6.8 Medium
CVSS2
Дефекты
CWE-426
Связанные уязвимости
github
больше 3 лет назад
Akeo Consulting Rufus 3.0 and earlier is affected by: DLL search order hijacking. The impact is: Arbitrary code execution WITH escalation of privilege. The component is: Executable installers, portable executables (ALL executables on the web site). The attack vector is: CAPEC-471, CWE-426, CWE-427.
EPSS
Процентиль: 59%
0.00388
Низкий
7.8 High
CVSS3
6.8 Medium
CVSS2
Дефекты
CWE-426