CVE-2020-0754

An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, aka ‘Windows Error Reporting Elevation of Privilege Vulnerability’. This CVE ID is unique from CVE-2020-0753.

Recent assessments:

tekwizz123 at February 23, 2020 7:58pm UTC reported:

Analysis is available at <https://github.com/afang5472/CVE-2020-0753-and-CVE-2020-0754/blob/master/WERReport-CVE-2020-0754/WERRaceCondition.docx&gt; although it doesn’t seem like the PoC code is available upon initial inspection.

This vulnerability is fairly similar to CVE-2020-0753 and results in arbitrary file deletion as the SYSTEM user should an attacker be able to create a symbolic link for a temporary file at the right time.

Vulnerabilty also exists within wersvc.dll, although the given function name is not provided within the writeup to the best of my knowledge.

Assessed Attacker Value: 2
Assessed Attacker Value: 2Assessed Attacker Value: 2