PT-2020-4082 · Microsoft · Windows Language Pack Installer+1

Lxf02942370 + 2 · Published 2020-09-08 · Updated 2023-12-31 · CVE-2020-1122

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Windows Language Pack Installer (affected versions not specified)

Description: The issue is related to the improper handling of file operations by the Windows Language Pack Installer, allowing an attacker to run processes in an elevated context. This can be exploited by running a specially crafted application on the victim system. The vulnerability is addressed by correcting the way the Windows Language Pack Installer handles file operations.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Improper Check for Exceptional Conditions

Weakness Enumeration

CWE-754

Related Identifiers

BDU:2020-04482

CVE-2020-1122

Affected Products

Windows

Windows Language Pack Installer

References · 6

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1122 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1122 · Security Note
• https://bdu.fstec.ru/vul/2020-04482 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-1122 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2020-1122 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-1122 · Vendor Advisory