CVE-2017-13083

Akeo Consulting Rufus prior to version 2.17.1187 does not adequately validate the integrity of updates downloaded over HTTP, allowing an attacker to easily convince a user to execute arbitrary code

Akeo Consulting Rufus prior to version 2.17.1187 does not adequately validate the integrity of updates downloaded over HTTP, allowing an attacker to easily convince a user to execute arbitrary code

Akeo Consulting Rufus en versiones anteriores a la 2.17.1187 no valida adecuadamente la integridad de las actualizaciones descargadas a través de HTTP, permitiendo que un atacante convenza fácilmente a un usuario para que ejecute código arbitrario.