Advisories

WinAVR Version 20100110 - Insecure Folder Permissions

Go Back
severity
high
date
Affecting
  • WinAVR 20100110

CWE
  • CWE-732 Incorrect Permission Assignment for Critical Resource
CVSS
7
CVSS V4 Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Credit
Mohammed Alshehri
Description
WinAVR version 20100110 contains an insecure permissions vulnerability that allows authenticated users to modify system files and executables. Attackers can leverage the overly permissive access controls to potentially modify critical DLLs and executable files in the WinAVR installation directory.