CVE-2020-0870— Microsoft Shell infrastructure 安全漏洞

Shell infrastructure component Elevation of Privilege Vulnerability

<p>An elevation of privilege vulnerability exists when the Shell infrastructure component improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context.</p> <p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.</p> <p>The update addresses the vulnerability by correcting the way in which the Shell infrastructure component handles objects in memory and preventing unintended elevation from lower integrity application.</p>

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

N/A

Microsoft Shell infrastructure 安全漏洞

Windows Shell infrastructure是美国Microsoft公司的一个Windows运行应用的核心组件。该应用的任务是处理操作系统界面的多个图形元素，包括任务栏透明度和开始菜单。 Microsoft Shell infrastructure组件存在安全漏洞。攻击者借助该漏洞可以运行特制的应用程序，从而控制受影响的系统。以下产品及版本受到影响： Windows 10 1909版本， Windows 10 1709版本， Windows 10 1809版本， Windows Server

N/A

N/A