CVE-2020-1122

Опубликовано: 11 сент. 2020

Источник: nvd

CVSS3: 5.5

CVSS3: 7.8

CVSS2: 4.6

EPSS Низкий

Описание

An elevation of privilege vulnerability exists when the Windows Language Pack Installer improperly handles file operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context.

An attacker could exploit this vulnerability by running a specially crafted application on the victim system.

The update addresses the vulnerability by correcting the way the Windows Language Pack Installer handles file operations.

Ссылки

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1122
Patch
Vendor Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1122
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*

EPSS

Процентиль: 70%

0.00637

Низкий

5.5 Medium

CVSS3

7.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-754

Связанные уязвимости

CVE-2020-1122

CVSS3: 5.5

msrc

почти 5 лет назад

Windows Language Pack Installer Elevation of Privilege Vulnerability

GHSA-72rh-rg2h-2726

CVSS3: 5.5

github

около 3 лет назад

An elevation of privilege vulnerability exists when the Windows Language Pack Installer improperly handles file operations, aka 'Windows Language Pack Installer Elevation of Privilege Vulnerability'.

BDU:2020-04482

CVSS3: 5.5

fstec

почти 5 лет назад

Уязвимость компонента Windows Language Pack Installer операционных систем Windows, позволяющая нарушителю запустить процессы в привилегированном процессе

EPSS

Процентиль: 70%

0.00637

Низкий

5.5 Medium

CVSS3

7.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-754