uthenticode vulnerabilities

2 known vulnerabilities in uthenticode from Trailofbits. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  uthenticode: Missing Cryptographic Step

  CVE-2023-40012Aug 9, 2023Trailofbits

  uthenticode is a small cross-platform library for partially verifying Authenticode digital signatures. Versions of uthenticode prior to the 2.x series did not check Extended Key Usages in certificates, in violation of the Authenticode X.509 certificate profile

• 9.8 Critical severity

  uthenticode: Improper Verification of Cryptographic Signature

  CVE-2023-39969Aug 9, 2023Trailofbits

  uthenticode is a small cross-platform library for partially verifying Authenticode digital signatures. Version 1.0.9 of uthenticode hashed the entire file rather than hashing sections by virtual address, in violation of the Authenticode specification. As a res