Buffer overflow in Microsoft Windows and Windows Server - CVE-2020-0668

Vulnerability details

The vulnerability allows a local user to escalate privilege so the system.

The vulnerability exists due to a boundary error in the Windows Kernel when handling objects in memory. A local user can create a specially crafted application, trigger memory corruption and execute arbitrary code on the target system with elevated privileges.

Affected software

How to mitigate CVE-2020-0668

Links to Public Exploits and PoC-codes

• Exploit #6957 - CVE-2020-0668 (Make CVE-2020-0668 exploit work for version < win10 v1903 and version >= win10 v1903) (October 29, 2021)
• Exploit #2851 - CVE-2020-0668 (Use CVE-2020-0668 to perform an arbitrary privileged file move operation.) (June 3, 2020)
• Exploit #2638 - Service Tracing Privilege Escalation (May 11, 2020)
• Exploit #2634 - Service Tracing Privilege Elevation Vulnerability (May 11, 2020)
• Exploit #306 - cve_2020_0668 (cve_2020_0668) (March 18, 2020)
• Exploit #307 - SysTracingPoc (CVE-2020-0668 - Microsoft Windows Service Tracing Arbitrary File Move Local Privilege Escalation Vulnerability) (March 18, 2020)
• Exploit #308 - CVE-2020-0668 (CVE-2020-0668) (March 18, 2020)

External References

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0668

Related Security Bulletins

• Multiple vulnerabilities in Microsoft Windows Kernel
• Multiple vulnerabilities in Dell EMC Unisphere for PowerMax and Dell EMC Solutions Enabler