March 22, 2024
Severity High Analysis Summary Ducktail Malware is a malicious program designed by hackers to infiltrate computers and networks globally. Ducktail malware is typically delivered through a […]
Rewterz Threat Advisory – CVE-2020-1020 – Adobe Font Manager Library Remote Code Execution Vulnerability
April 15, 2020
Rewterz Threat Advisory – ICS: Siemens KTK, SIDOOR, SIMATIC, and SINAMICS
April 15, 2020
Rewterz Threat Advisory – CVE-2020-1020 – Adobe Font Manager Library Remote Code Execution Vulnerability
April 15, 2020
Rewterz Threat Advisory – ICS: Siemens KTK, SIDOOR, SIMATIC, and SINAMICS
April 15, 2020
Severity
High
Analysis Summary
CVE-2020-0935
An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links. An attacker who successfully exploited this vulnerability could overwrite a targeted file leading to an elevated status.
To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.
Impact
Gain control of victim’s system
Affected Vendors
Microsoft
Affected Products
OneDrive
Remediation
Microsoft has released upgraded patches for OneDrive for Windows.
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0935