PT-2020-3679 · Microsoft · Windows

Published 2020-08-11 · Updated 2024-01-19 · CVE-2020-1467

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Windows (affected versions not specified)

Description The issue is related to errors in handling hard links in Windows. An attacker who successfully exploits this could overwrite a targeted file, leading to elevated status. To exploit this, an attacker would first have to log on to the system and then run a specially crafted application. The security update addresses the vulnerability by correcting how Windows handles hard links.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-65

Related Identifiers

BDU:2020-04027

CVE-2020-1467

Affected Products

Windows

References · 8

• https://bdu.fstec.ru/vul/2020-04027 · Security Note
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1467 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-1467 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1467 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-1467 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2020-1467 · Vendor Advisory
• https://t.me/cvenotify/67951 · Telegram Post
• https://cybersecurity-help.cz/vdb/SB2020081226 · Note