PT-2020-3899 · Microsoft · Windows Shell+1

Published 2020-09-08 · Updated 2023-12-31 · CVE-2020-1098

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Windows Shell (affected versions not specified)

Description: The issue is related to the improper handling of objects in memory by the Shell infrastructure component, allowing an attacker to potentially run processes in an elevated context. To exploit this, an attacker must first log on to the system and then run a specially crafted application. This could enable the attacker to take control of an affected system. The vulnerability is addressed by correcting how the Shell infrastructure component handles objects in memory, preventing unintended elevation from lower integrity applications.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

BDU:2020-04292

CVE-2020-1098

Affected Products

Windows

Windows Shell

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2020-1098 · Security Note
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1098 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-1098 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-04292 · Security Note