CVE-2020-1485: Windows Image Acquisition Service Information Disclosure Vulnerability
An information disclosure vulnerability exists when the Windows Image Acquisition (WIA) Service improperly discloses contents of its memory, aka 'Windows Image Acquisition Service Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1474.
Other sources
An information disclosure vulnerability exists when the Windows Image Acquisition (WIA) Service improperly discloses contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit the vulnerability, an authenticated attacker could connect an imaging device (camera, scanner, cellular phone) to an affected system and run a specially crafted application to disclose information. The security update addresses the vulnerability by correcting how the WIA Service handles objects in memory.
— NVD
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2020-1485?
CVE-2020-1485 has a severity rating of important as it allows information disclosure in the Windows Image Acquisition Service.
How do I fix CVE-2020-1485?
To fix CVE-2020-1485, apply the Microsoft security updates that address this vulnerability for affected versions of Windows.
What versions of Windows are affected by CVE-2020-1485?
CVE-2020-1485 affects various versions of Windows, including Windows 7, Windows 10, and Windows Server editions.
What is the impact of CVE-2020-1485?
The impact of CVE-2020-1485 is the potential unauthorized disclosure of sensitive information from the memory of the Windows Image Acquisition Service.
Is CVE-2020-1485 unique from CVE-2020-1474?
Yes, CVE-2020-1485 is a unique vulnerability and should not be confused with CVE-2020-1474, which addresses different issues.