CVE-2019-1010101

2019-07-1916:15:12

Google

osv.dev

8 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.4%

JSON

Akeo Consulting Rufus 3.0 and earlier is affected by: Insecure Permissions. The impact is: arbitrary code execution with escalation of privilege. The component is: Executable installer, portable executable (ALL executables available). The attack vector is: CWE-29, CWE-377, CWE-379.

CPENameOperatorVersion
rufuseq1.0.4
rufuseq2.2
rufuseq2.18
rufuseq2.4
rufuseq2.3
rufuseq2.6
rufuseq1.1.3
rufuseq1.2.0
rufuseq2.9
rufuseq1.0.6

Name	Operator	Version
rufus	eq	1.0.4
rufus	eq	2.2
rufus	eq	2.18
rufus	eq	2.4
rufus	eq	2.3
rufus	eq	2.6
rufus	eq	1.1.3
rufus	eq	1.2.0
rufus	eq	2.9
rufus	eq	1.0.6

Rows per page:

1-10 of 521

References

seclists.org/oss-sec/2018/q2/146