CVE-2019-1010100

Akeo Consulting Rufus 3.0 and earlier is affected by: DLL search order hijacking. The impact is: Arbitrary code execution WITH escalation of privilege. The component is: Executable installers, portable executables (ALL executables on the web site). The attack vector is: CAPEC-471, CWE-426, CWE-427.

Score

CVSS 3.0 7.8 High

Status

Modified - josh@bress.net

Published

2019-07-19

Last modified

2024-08-05

Weaknesses

CWE-426, CWE-427

Affected products

• Rufus (Akeo)
• Rufus (Akeo Consulting)

References

• http://seclists.org/oss-sec/2018/q2/146