Exploitation Summary
EIP tracks 2 public exploits for CVE-2019-1476. PoCs published by Gabor Seljan, sgabe.
AI-analyzed exploit summary This is a detailed writeup describing the steps to exploit CVE-2019-1476, an elevation of privilege vulnerability in AppXSvc due to improper handling of file hard links. It allows a low-privileged user to overwrite arbitrary files, leading to denial of service or privilege escalation.
Description
An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1483.
Exploits (2)
This is a detailed writeup describing the steps to exploit CVE-2019-1476, an elevation of privilege vulnerability in AppXSvc due to improper handling of file hard links. It allows a low-privileged user to overwrite arbitrary files, leading to denial of service or privilege escalation.
This repository contains a functional proof-of-concept exploit for CVE-2019-1476, which leverages a hardlink attack to overwrite arbitrary files via the AppXSvc service. The exploit manipulates file attributes and process states to achieve a denial-of-service (DoS) condition.
References (2)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H