CVE-2020-1020
HIGH KEVMicrosoft Windows - Remote Code Execution via Adobe Type Manager Library Font Parsing
Title source: llmExploitation Summary
CVE-2020-1020 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added November 3, 2021. EIP tracks 2 public exploits from researchers including KaLendsi, CrackerCat.
AI-analyzed exploit summary This is a working proof-of-concept exploit for CVE-2020-1020, targeting a Windows kernel vulnerability in the font handling mechanism. The exploit leverages a type confusion bug in the NtGdiAddRemoteFontToDC function to achieve arbitrary read/write in kernel memory, leading to local privilege escalation.
Description
A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format.For all systems except Windows 10, an attacker who successfully exploited the vulnerability could execute code remotely, aka 'Adobe Font Manager Library Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0938.
Exploits (2)
This is a working proof-of-concept exploit for CVE-2020-1020, targeting a Windows kernel vulnerability in the font handling mechanism. The exploit leverages a type confusion bug in the NtGdiAddRemoteFontToDC function to achieve arbitrary read/write in kernel memory, leading to local privilege escalation.
This repository contains a proof-of-concept exploit for CVE-2020-1020, targeting a vulnerability in Windows font handling. The exploit leverages malformed FontType1 data to achieve arbitrary code execution via syscalls and shellcode injection.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H