CVE-2019-1010100 Akeo Consulting Rufus 3.0 and earlier is affected by: DLL search order hijacking. The impact is: Arbitrary code execution WITH escalation of privilege. The component is: Executable installers, portabl...
HighCVSS 7.8
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Akeo Consulting Rufus 3.0 and earlier is affected by: DLL search order hijacking. The impact is: Arbitrary code execution WITH escalation of privilege. The component is: Executable installers, portable executables (ALL executables on the web site). The attack vector is: CAPEC-471, CWE-426, CWE-427.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| akeo rufus | <= 3.0 | No fix listed |
| Akeo Consulting Rufus | = ≤ 3.0 | No fix listed |
References
- seclists.org mailing-list third-party-advisory