CVE-2019-1010101

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 3.4%

exploitation probability

3.4%top 12% of all CVEs

observed exploitation

nono source reports it

Akeo Consulting Rufus 3.0 and earlier is affected by: Insecure Permissions. The impact is: arbitrary code execution with escalation of privilege. The component is: Executable installer, portable executable (ALL executables available). The attack vector is: CWE-29, CWE-377, CWE-379.

Affected products

Akeo Consulting · Rufus

References

http://seclists.org/oss-sec/2018/q2/146