PT-2020-3935 · Microsoft · Windows Modules Installer+1

Published 2020-08-09 · Updated 2023-12-31 · CVE-2020-0911

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Windows Modules Installer (affected versions not specified)

Description: An elevation of privilege issue exists due to the improper handling of objects in memory by Windows Modules Installer. This could allow an attacker to run arbitrary code in an elevated context by exploiting the vulnerability with a specially crafted application. The issue is resolved by correcting how Windows Modules Installer handles objects in memory.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2020-04328

CVE-2020-0911

Affected Products

Windows

Windows Modules Installer

References · 12

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0911 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0911 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-0911 · Security Note
• https://osv.dev/vulnerability/CVE-2020-0911 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2020-0911 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-04328 · Security Note
• https://t.me/rnetsec/18923 · Telegram Post
• https://t.me/defcon_news/115612 · Telegram Post
• https://twitter.com/ptracesecurity/status/1696733237710614837 · Twitter Post
• https://t.me/secharvester/14004 · Telegram Post
• https://twitter.com/0xor0ne/status/1696243836949844056 · Twitter Post
• https://twitter.com/reverseame/status/1702573719925739738 · Twitter Post