SB2019052301 - Privilege escalation in Microsoft Windows Error Reporting service
Published: May 23, 2019
Security Bulletin ID
SB2019052301
Severity
Low
Patch available
NO
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Code execution
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Race condition (CVE-ID: N/A)
The vulnerability allows a remote attacker to escalate privileges on the system.
The vulnerability exists due to a race condition in the way the Windows Error Reporting service is processing file permissions. A local user can create a hardlink to a privileged file and change its permission within a short timeframe.
Successful exploitation of the vulnerability may allow an attacker to grant write permissions to critical system files and escalate privileges on the system.
Remediation
Cybersecurity Help is not aware of any official remediation provided by the vendor.