PT-2020-3676 · Microsoft · Windows Print Spooler+1

Zhiniang Peng · Published 2020-08-11 · Updated 2026-02-23 · CVE-2020-1337

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Windows Print Spooler (affected versions not specified)

Description An elevation of privilege issue exists due to the Windows Print Spooler service improperly allowing arbitrary writing to the file system. This could enable an attacker to run arbitrary code with elevated system privileges, allowing them to install programs, view, change, or delete data, or create new accounts with full user rights. To exploit this, an attacker would need to log on to an affected system and run a specially crafted script or application.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

LPE

Time Of Check To Time Of Use

Weakness Enumeration

CWE-367

CWE-264

Related Identifiers

BDU:2020-04024

CVE-2020-1337

ZDI-20-995

Affected Products

Windows

Windows Print Spooler

References · 27

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/cve_2020_1337_printerdemon.rb · Exploit
• 🔥 https://github.com/sailay1996/cve-2020-1337-poc · Exploit
• 🔥 https://github.com/math1as/CVE-2020-1337-exploit · Exploit
• 🔥 https://github.com/neofito/CVE-2020-1337 · Exploit
• 🔥 https://github.com/VoidSec/CVE-2020-1337 · Exploit
• 🔥 http://packetstormsecurity.com/files/160993/Microsoft-Spooler-Local-Privilege-Elevation.html · Exploit
• 🔥 http://packetstormsecurity.com/files/160028/Microsoft-Windows-Local-Spooler-Bypass.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-1337 · Security Note
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1337 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-04024 · Security Note
• https://osv.dev/vulnerability/CVE-2020-1337 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2020-1337 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-20-995 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1337 · Security Note
• https://t.me/proxy_bar/748 · Telegram Post