PT-2020-15141
CVE-2020-1885
·
Published
2020-04-08
·
Updated
2021-07-21
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Oculus Desktop versions prior to 1.44.0.32849
Description
The issue allows local users to write to arbitrary files and gain privileges through vectors involving a hard link to a log file, by exploiting the ability of the OVRRedir.exe process to write to an unprivileged file.
Recommendations
For versions prior to 1.44.0.32849, update to version 1.44.0.32849 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾