CVE-2017-13083: High severity Rufus Project Rufus vulnerability
Published Oct 18, 2017
·Updated
Akeo Consulting Rufus prior to version 2.17.1187 does not adequately validate the integrity of updates downloaded over HTTP, allowing an attacker to easily convince a user to execute arbitrary code
Affected Software
2 affected components
Rufus Project Rufus<=2.17
Akeo Rufus<=2.17
Event History
Oct 18, 2017
CVE Published
via MITRE·01:00 PM
Data Sourced
via MITRE·01:00 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:29 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2017-13083?
CVE-2017-13083 has been classified as a high severity vulnerability due to the potential for remote code execution.
2
How do I fix CVE-2017-13083?
To fix CVE-2017-13083, upgrade to Rufus version 2.17.1187 or later.
3
What kind of vulnerabilities does CVE-2017-13083 represent?
CVE-2017-13083 represents a vulnerability related to improper validation of updates, allowing potential code execution.
4
Who is affected by CVE-2017-13083?
Users of Rufus versions prior to 2.17.1187 are affected by CVE-2017-13083.
5
Can CVE-2017-13083 be exploited without user interaction?
Yes, CVE-2017-13083 can potentially be exploited if a user inadvertently executes malicious code following a deceptive update prompt.