CVE-2020-1034 PoC — Windows Kernel Elevation of Privilege Vulnerability

Source

https://github.com/GeorgyFirsov/CVE-2020-1034

Associated Vulnerability

Title:Windows Kernel Elevation of Privilege Vulnerability (CVE-2020-1034)
Description:An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application. The security update addresses the vulnerability by ensuring the Windows Kernel properly handles objects in memory.

Description

CVE 2020-1034 exploit and presentation

Readme

# CVE-2020-1034

> **Warning**
> *This repository contains a working exploit. Publication was made for educational purposes only. Owner of this repository is not responsible for any damage done by any part of source code published here.*

***This repository was created as a homework for "Protected Information Systems" course in National Research Nuclear University MEPhI.***

CVE 2020-1034 exploit and presentation.

## Brief description

An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability' \[1].

More info: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-1034

## References

1. [MITRE CVE-2020-1034][1]


[1]: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1034

File Snapshot


 [4.0K]  /data/pocs/1919dcd797b33ade610fe1977a003aace2cfe1d8
├── [379K]  CVE 2020-1034.pdf
├── [4.0K]  exploit
│   ├── [4.0K]  CVE-2020-1034-exploit
│   │   ├── [8.0K]  CVE-2020-1034-exploit.vcxproj
│   │   ├── [1.5K]  CVE-2020-1034-exploit.vcxproj.filters
│   │   ├── [ 165]  CVE-2020-1034-exploit.vcxproj.user
│   │   ├── [2.1K]  error.inl
│   │   ├── [4.9K]  main.cpp
│   │   ├── [9.4K]  native.h
│   │   ├── [  17]  pch.cpp
│   │   ├── [ 459]  pch.h
│   │   ├── [6.7K]  utils.cpp
│   │   └── [ 415]  utils.h
│   └── [1.4K]  CVE-2020-1034.sln
├── [1.0K]  LICENSE
├── [4.0K]  presentation
│   ├── [8.3K]  CVE 2020-1034.tex
│   └── [4.0K]  images
│       ├── [ 35K]  elevated-privileges.png
│       ├── [ 19K]  exploit.png
│       ├── [ 13K]  mephi-logo.png
│       └── [177K]  working.png
└── [ 806]  README.md

4 directories, 19 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!