PT-2020-1270 · Microsoft · Windows Common Log File System Driver+1

Meysam Firouzi · Published 2020-01-14 · Updated 2021-07-21 · CVE-2020-0634

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Windows Common Log File System (CLFS) driver (affected versions not specified)

Description The issue exists due to improper handling of objects in memory by the Windows Common Log File System (CLFS) driver, allowing an attacker to potentially elevate their privileges. This could affect the system, enabling attackers to gain higher access levels.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Buffer Overflow

Use After Free

Weakness Enumeration

CWE-119

CWE-416

Related Identifiers

BDU:2020-00136

CVE-2020-0634

ZDI-20-125

Affected Products

Windows

Windows Common Log File System Driver

References · 9

• https://zerodayinitiative.com/advisories/ZDI-20-125 · Security Note
• https://osv.dev/vulnerability/CVE-2020-0634 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2020-0634 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-0634 · Security Note
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0634 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-00136 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0634 · Security Note
• https://cybersecurity-help.cz/vdb/SB2020011434 · Note
• https://vuldb.com/?id.148648 · Note