PT-2020-3937 · Microsoft · Windows Print Spooler+1

Published 2020-08-09 · Updated 2023-12-31 · CVE-2020-1030

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Windows Print Spooler (affected versions not specified)

Description: The issue is related to inadequate access control in the Windows Print Spooler service, allowing an attacker to elevate their privileges by running a specially crafted application. This could enable the attacker to run arbitrary code with elevated system privileges, install programs, view, change, or delete data, or create new accounts with full user rights. To exploit this vulnerability, an attacker would need to log on to an affected system and run a specially crafted script or application.

Recommendations: To resolve the issue, apply the update that corrects how the Windows Print Spooler Component writes to the file system. As a temporary workaround, consider restricting access to the Windows Print Spooler service until the update is applied. Avoid running specially crafted scripts or applications on affected systems until the issue is resolved.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

BDU:2020-04330

CVE-2020-1030

Affected Products

Windows

Windows Print Spooler

References · 7

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1030 · Security Note
• https://bdu.fstec.ru/vul/2020-04330 · Security Note
• https://osv.dev/vulnerability/CVE-2020-1030 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2020-1030 · Vendor Advisory
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1030 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-1030 · Security Note
• https://t.me/cybersecuritytechnologies/2189 · Telegram Post