CVE-2020-1464

Microsoft Windows Spoofing Vulnerability

Windows 10 1507

A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploited this vulnerability could bypass security features and load improperly signed files. In an attack scenario, an attacker could bypass security features intended to prevent improperly signed files from being loaded. The update addresses the vulnerability by correcting how Windows validates file signatures.

17. Aug 2020

Ausgewertete Quellen

• Microsoft
  https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1464
• Hinweis
  https://blog.virustotal.com/2019/01/distribution-of-malicious-jar-appended.html
• Hinweis
  https://krebsonsecurity.com/2020/08/microsoft-put-off-fixing-zero-day-for-2-years/
• Hinweis
  https://medium.com/%40TalBeerySec/glueball-the-story-of-cve-2020-1464-50091a1f98bd
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-1464
• CISA
  Microsoft Windows Spoofing Vulnerability
• NVD
  CVE-2020-1464