PT-2020-3700

CVE-2020-1549

·

Published

2020-08-11

·

Updated

2024-01-19

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Windows CDP User Components (affected versions not specified)
Description The issue is related to errors in handling memory objects, which can be exploited by an attacker to elevate their privileges. This can be achieved by running a specially crafted application on the victim system, but the attacker must first gain execution on the system. The vulnerability is associated with improper memory handling by the Windows CDP User Components.
Recommendations To resolve the issue, apply the security update that corrects how the Windows CDP User Components handle memory. As a temporary workaround, consider restricting the execution of specially crafted applications on the system until the security update is applied.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾