SB2020051226 - Multiple vulnerabilities in Microsoft Windows Clipboard Service

Description

This security bulletin contains information about 4 secuirty vulnerabilities.

1) Permissions, Privileges, and Access Controls (CVE-ID: CVE-2020-1111)

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to the way Windows handles calls to Clipboard Service. A local user can create a malicious application, launch it on the system and run arbitrary code in the security context of the local system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.

To exploit this vulnerability, an attacker would first have to log on to the system.

2) Permissions, Privileges, and Access Controls (CVE-ID: CVE-2020-1121)

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to the way Windows handles calls to Clipboard Service. A local user can create a malicious application, launch it on the system and run arbitrary code in the security context of the local system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.

To exploit this vulnerability, an attacker would first have to log on to the system.

3) Permissions, Privileges, and Access Controls (CVE-ID: CVE-2020-1165)

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to the way Windows handles calls to Clipboard Service. A local user can create a malicious application, launch it on the system and run arbitrary code in the security context of the local system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.

To exploit this vulnerability, an attacker would first have to log on to the system.

4) Permissions, Privileges, and Access Controls (CVE-ID: CVE-2020-1166)

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to the way Windows handles calls to Clipboard Service. A local user can create a malicious application, launch it on the system and run arbitrary code in the security context of the local system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.

To exploit this vulnerability, an attacker would first have to log on to the system.

Remediation

Install update from vendor's website.

References

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1111
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1121
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1165
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1166