Skip to content
OpenAdvisories

Product · trailofbits

uthenticode

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.1

    uthenticode signature validation bypass vulnerability

    uthenticode is a small cross-platform library for partially verifying Authenticode digital signatures. Version 1.0.9 of uthenticode hashed the entire file rather than hashing sections by virtual address, in violation of the Authenticode specification. As a re…