{"id":14208,"date":"2020-04-24T00:51:01","date_gmt":"2020-04-23T22:51:01","guid":{"rendered":"http:\/\/159.69.82.204\/win\/?p=14208"},"modified":"2020-04-24T00:51:01","modified_gmt":"2020-04-23T22:51:01","slug":"poc-fr-windows-10-schwachstelle-cve-2020-0624","status":"publish","type":"post","link":"https:\/\/borncity.com\/win\/2020\/04\/24\/poc-fr-windows-10-schwachstelle-cve-2020-0624\/","title":{"rendered":"PoC for Windows 10 Vulnerability CVE-2020-0624"},"content":{"rendered":"

[German<\/a>]On patchday, January 14, 2020, Microsoft has closed the vulnerability CVE-2020-0624 (Win32k Elevation of Privilege) with security updates. Now I have found a Proof of Concept (PoC).<\/p>\n

<\/p>\n

Vulnerability CVE-2020-0624<\/h2>\n

\"\"In Windows, an Elevation of Privilege vulnerability CVE-2020-0624<\/a> exists in the Win32k file. The vulnerability is privilege escalation because the Win32k component does not handle objects in memory correctly. <\/p>\n

An attacker who successfully exploited this vulnerability could execute arbitrary code in kernel mode. This would allow the attacker to install programs, view, modify, or delete data, and create new accounts with full user privileges.<\/p>\n

However, to exploit this vulnerability, an attacker would have to log on to the system first. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.<\/p>\n

Affected systems<\/h2>\n

The following Windows systems are affected by the vulnerability, which Microsoft considers unlikely to be exploited:<\/p>\n