PT-2020-3700
CVE-2020-1549
·
Published
2020-08-11
·
Updated
2024-01-19
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Windows CDP User Components (affected versions not specified)
Description
The issue is related to errors in handling memory objects, which can be exploited by an attacker to elevate their privileges. This can be achieved by running a specially crafted application on the victim system, but the attacker must first gain execution on the system. The vulnerability is associated with improper memory handling by the Windows CDP User Components.
Recommendations
To resolve the issue, apply the security update that corrects how the Windows CDP User Components handle memory.
As a temporary workaround, consider restricting the execution of specially crafted applications on the system until the security update is applied.
Found an issue in the description? Have something to add? Feel free to write us 👾