← All credits

Reported by Will Dormann of the CERT/CC

1 vulnerability record and advisories credit this contributor.

CVE-2017-13083
Akeo Consulting Rufus prior to version 2.17.1187 does not adequately validate the integrity of updates downloaded over HTTP, allowing an attacker to easily convince a user to execute arbitrary code