PT-2020-3935 · Microsoft · Windows Modules Installer+1

CVE-2020-0911

·

Published

2020-08-09

·

Updated

2023-12-31

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: Windows Modules Installer (affected versions not specified)
Description: An elevation of privilege issue exists due to the improper handling of objects in memory by Windows Modules Installer. This could allow an attacker to run arbitrary code in an elevated context by exploiting the vulnerability with a specially crafted application. The issue is resolved by correcting how Windows Modules Installer handles objects in memory.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2020-04328
CVE-2020-0911

Affected Products

Windows
Windows Modules Installer