CVE-2020-1337
HIGHWindows Print Spooler - Privilege Escalation via Arbitrary File Write
Title source: llmExploitation Summary
EIP tracks 5 public exploits for CVE-2020-1337.
PoCs published by sailay1996, math1as, neofito, including Metasploit module exploits/windows/local/cve_2020_1337_printerdemon.
AI-analyzed exploit summary This repository contains a proof-of-concept exploit for CVE-2020-1337, a Windows Print Spooler Elevation of Privilege vulnerability. The exploit leverages Windows Error Reporting to trigger a bind shell on port 1337, demonstrating local privilege escalation.
Description
An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system. An attacker who successfully exploited this vulnerability could run arbitrary code with elevated system privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted script or application. The update addresses the vulnerability by correcting how the Windows Print Spooler Component writes to the file system.
Exploits (5)
This repository contains a proof-of-concept exploit for CVE-2020-1337, a Windows Print Spooler Elevation of Privilege vulnerability. The exploit leverages Windows Error Reporting to trigger a bind shell on port 1337, demonstrating local privilege escalation.
This is a working PoC for CVE-2020-1337, a Windows privilege escalation vulnerability. It exploits a write-what-where condition by manipulating printer port paths via junction points to overwrite system files.
This PoC demonstrates a binary planting attack via the Windows Print Spooler service (CVE-2020-1337), allowing arbitrary printer creation and driver installation. It leverages DLL hijacking by exploiting the spooler's insecure handling of printer drivers.
This repository contains a writeup for CVE-2020-1337, a bypass of CVE-2020-1048's patch via a Junction Directory, leading to a Local Privilege Escalation (LPE) in the Windows Print Spooler Service. The vulnerability requires low privilege access and a restart of the spooler service.
This Metasploit module exploits CVE-2020-1337, a local privilege escalation vulnerability in the Windows Print Spooler service. It abuses a file write vulnerability to overwrite a DLL in a privileged directory, achieving persistent elevation of privileges.
References (3)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H