Main Vulnerability Database Vulnerabilities #VU25964

UNIX symbolic link following in Microsoft Windows and Windows Server - CVE-2020-0799

Published: March 11, 2020

Vulnerability identifier: #VU25964

CSH Severity: Low

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2020-0799

CWE-ID: CWE-61

Exploitation vector: Local access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists in Microsoft Windows when the Windows kernel fails to properly handle parsing of certain symbolic links. A local user can create a specially crafted symbolic link to a critical file on the system and overwrite it with privileges of the application.

Successful exploitation of this vulnerability may result in privilege escalation.

Affected software

Microsoft Windows
Windows Server

How to mitigate CVE-2020-0799

Install update from vendor's website.

External References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0799

Related Security Bulletins