A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploited this vulnerability could bypass security features and load improperly signed files.
In an attack scenario, an attacker could bypass security features intended to prevent improperly signed files from being loaded.
The update addresses the vulnerability by correcting how Windows validates file signatures.
References
| Link | Resource |
|---|---|
| https://blog.virustotal.com/2019/01/distribution-of-malicious-jar-appended.html | Third Party Advisory |
| https://krebsonsecurity.com/2020/08/microsoft-put-off-fixing-zero-day-for-2-years/ | Issue Tracking Third Party Advisory |
| https://medium.com/%40TalBeerySec/glueball-the-story-of-cve-2020-1464-50091a1f98bd | Exploit Third Party Advisory |
| https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1464 | Patch Vendor Advisory |
| https://blog.virustotal.com/2019/01/distribution-of-malicious-jar-appended.html | Third Party Advisory |
| https://krebsonsecurity.com/2020/08/microsoft-put-off-fixing-zero-day-for-2-years/ | Issue Tracking Third Party Advisory |
| https://medium.com/%40TalBeerySec/glueball-the-story-of-cve-2020-1464-50091a1f98bd | Exploit Third Party Advisory |
| https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1464 | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2020-08-17 19:15
Updated : 2025-04-04 20:47
NVD link : CVE-2020-1464
Mitre link : CVE-2020-1464
CVE.ORG link : CVE-2020-1464
JSON object : View
Products Affected
microsoft
- windows_server_1903
- windows_server_2019
- windows_10_1909
- windows_server_2016
- windows_server_2004
- windows_10_1903
- windows_server_1909
- windows_server_2012
- windows_10_1809
- windows_10_1709
- windows_rt_8.1
- windows_8.1
- windows_server_2008
- windows_10_1803
- windows_7
- windows_10_1607
- windows_10_2004
- windows_10_1507
CWE
CWE-347
Improper Verification of Cryptographic Signature