CVE-2020-1436: Microsoft Windows PFB Font File Out-Of-Bounds Write Privilege Escalation Vulnerability
A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted fonts.For all systems except Windows 10, an attacker who successfully exploited the vulnerability could execute code remotely, aka 'Windows Font Library Remote Code Execution Vulnerability'.
Other sources
This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the parsing of fonts. Crafted data in a font can trigger a write past the end of a heap-based buffer. An attacker can leverage this vulnerability to escalate privileges and execute code in the context of the kernel.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2020-1436?
CVE-2020-1436 has a critical severity rating, allowing for remote code execution due to improper handling of specially crafted fonts in the Windows font library.
How do I fix CVE-2020-1436?
To fix CVE-2020-1436, apply the latest security updates provided by Microsoft for all affected versions of Windows.
What versions of Windows are affected by CVE-2020-1436?
CVE-2020-1436 affects several Windows versions including Windows 7, Windows 8.1, Windows 10, and various Windows Server versions.
Can CVE-2020-1436 be exploited remotely?
Yes, CVE-2020-1436 can be exploited remotely, allowing attackers to execute arbitrary code by tricking users into opening malicious files.
What types of attacks can exploit CVE-2020-1436?
CVE-2020-1436 can be exploited through attacks that involve specially crafted font files, typically delivered via email or web links.