CVE-2020-1400: Microsoft Windows JET Database Engine Integer Underflow Remote Code Execution Vulnerability
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1401, CVE-2020-1407.
Other sources
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the JET database engine. Crafted data in an MDB file can trigger an integer underflow before writing to memory. An attacker can leverage this vulnerability to execute code in the context of the current process.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2020-1400?
CVE-2020-1400 has a CVSS score that indicates it allows remote code execution, making it a high severity vulnerability.
How do I fix CVE-2020-1400?
To fix CVE-2020-1400, apply the latest security updates provided by Microsoft for affected Windows versions.
Which versions of Windows are affected by CVE-2020-1400?
CVE-2020-1400 affects various Windows versions including Windows 7, 8.1, Windows 10, and Windows Server 2012, among others.
What causes CVE-2020-1400 vulnerability?
CVE-2020-1400 is caused by the Windows Jet Database Engine improperly handling objects in memory.
Can CVE-2020-1400 be exploited remotely?
Yes, CVE-2020-1400 can be exploited remotely by attackers to execute arbitrary code on the affected system.