VoidSec / CVE-2020-1337

CVE-2020-1337 a bypass of (PrintDemon) CVE-2020-1048’s patch

Home Page:https://voidsec.com/cve-2020-1337-printdemon-is-dead-long-live-printdemon/

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

CVE-2020-1337

CVE-2020-1337 is a bypass of (PrintDemon) CVE-2020-1048’s patch via a Junction Directory, made to remediate an Elevation of Privileges (EoP)\Local Privilege Escalation (LPE) vulnerability affecting the Windows’ Print Spooler Service.

The vulnerability does require low privilege access and for the spooler service to restart.

The patch appeared in Microsoft’s patch Tuesday (11th August 2020) - https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2020-1337#ID0EWIAC.

Vulnerability description, root cause analysis and PoC code on https://voidsec.com/cve-2020-1337-printdemon-is-dead-long-live-printdemon/