PT-2020-1902

CVE-2020-0773

Published

2020-03-10

Updated

2021-07-21

Description by

CVSS 3.1

7.8

High

MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Windows (affected versions not specified)

Description The issue is related to the incorrect handling of objects in memory by the ActiveX Installer Service in Windows operating systems. This can be exploited by an attacker using a specially crafted application to elevate their privileges. The vulnerability allows attackers to affect the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

Related identifiers