Skip to content

Latest commit

 

History

History
9 lines (5 loc) · 663 Bytes

README.md

File metadata and controls

9 lines (5 loc) · 663 Bytes

CVE-2020-1337

CVE-2020-1337 is a bypass of (PrintDemon) CVE-2020-1048’s patch via a Junction Directory, made to remediate an Elevation of Privileges (EoP)\Local Privilege Escalation (LPE) vulnerability affecting the Windows’ Print Spooler Service.

The vulnerability does require low privilege access and for the spooler service to restart.

The patch appeared in Microsoft’s patch Tuesday (11th August 2020) - https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2020-1337#ID0EWIAC.

Vulnerability description, root cause analysis and PoC code on https://voidsec.com/cve-2020-1337-printdemon-is-dead-long-live-printdemon/