Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2020-1020
HistoryApr 15, 2020 - 3:15 p.m.

CVE-2020-1020

2020-04-1515:15:20
CWE-787
[email protected]
web.nvd.nist.gov
2

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.4 High

AI Score

Confidence

High

0.953 High

EPSS

Percentile

99.4%

JSON

A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format.For all systems except Windows 10, an attacker who successfully exploited the vulnerability could execute code remotely, aka ‘Adobe Font Manager Library Remote Code Execution Vulnerability’. This CVE ID is unique from CVE-2020-0938.

Affected configurations

NVD
Node
microsoftwindows_10Match-
OR
microsoftwindows_10Match1607
OR
microsoftwindows_10Match1709
OR
microsoftwindows_10Match1803
OR
microsoftwindows_10Match1809
OR
microsoftwindows_10Match1903
OR
microsoftwindows_10Match1909
OR
microsoftwindows_7Match-sp1
OR
microsoftwindows_8.1Match-
OR
microsoftwindows_rt_8.1Match-
OR
microsoftwindows_server_2008Match-sp2
OR
microsoftwindows_server_2008Matchr2sp1itanium
OR
microsoftwindows_server_2008Matchr2sp1x64
OR
microsoftwindows_server_2012Match-
OR
microsoftwindows_server_2012Matchr2
OR
microsoftwindows_server_2016Match-
OR
microsoftwindows_server_2016Match1803
OR
microsoftwindows_server_2016Match1903
OR
microsoftwindows_server_2016Match1909
OR
microsoftwindows_server_2019Match-

Related

attackerkb 2
nvd 1
prion 2
cve 2
cvelist 2
googleprojectzero 2
threatpost 2
mscve 3
cisa_kev 2
checkpoint_advisories 2
githubexploit 2
krebs 1
cert 1
thn 1
openvas 9
qualysblog 2
mskb 14
nessus 10
kaspersky 2
avleonov 1
attackerkb
attackerkb
CVE-2020-1020
2020-04-15 00:00:00
ADV200006 - Type 1 Font Parsing Remote Code Execution Vulnerability in Windows
2020-04-15 00:00:00
nvd
nvd
CVE-2020-0938
2020-04-15 15:15:16
prion
prion
Remote code execution
2020-04-15 15:15:00
Remote code execution
2020-04-15 15:15:00
cve
cve
CVE-2020-0938
2020-04-15 15:15:16
CVE-2020-1020
2020-04-15 15:15:20
cvelist
cvelist
CVE-2020-0938
2020-04-15 15:12:55
CVE-2020-1020
2020-04-15 15:13:27
googleprojectzero
googleprojectzero
In-the-Wild Series: Windows Exploits
2021-01-12 00:00:00
Introducing the In-the-Wild Series
2021-01-12 00:00:00
threatpost
threatpost
Sophisticated Hacks Against Android, Windows Reveal Zero-Day Trove
2021-01-13 16:57:39
April Patch Tuesday: Microsoft Battles 4 Bugs Under Active Exploit
2020-04-14 19:45:49
mscve
mscve
Adobe Font Manager Library Remote Code Execution Vulnerability
2020-04-14 07:00:00
Adobe Font Manager Library Remote Code Execution Vulnerability
2020-04-14 07:00:00
Type 1 Font Parsing Remote Code Execution Vulnerability
2020-03-23 07:00:00
cisa_kev
cisa_kev
Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability
2021-11-03 00:00:00
Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability
2021-11-03 00:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft OpenType Font Parsing Remote Code Execution (CVE-2020-0938)
2020-04-14 00:00:00
Adobe Font Manager Library Remote Code Execution Vulnerability (CVE-2020-1020)
2020-04-14 00:00:00
githubexploit
githubexploit
Exploit for Out-of-bounds Write in Microsoft
2021-08-10 03:10:39
Exploit for Out-of-bounds Write in Microsoft
2021-06-10 06:23:59
krebs
krebs
Microsoft Patch Tuesday, April 2020 Edition
2020-04-14 22:24:10
cert
cert
Microsoft Windows Type 1 font parsing remote code execution vulnerabilities
2020-03-23 00:00:00
thn
thn
Microsoft Issues Patches for 3 Bugs Exploited as Zero-Day in the Wild
2020-04-14 18:24:00
openvas
openvas
WordPress Elementor Page Builder Plugin <= 2.9.13 XSS Vulnerability
2020-09-03 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB4550964)
2020-04-15 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB4550961)
2020-04-15 00:00:00
qualysblog
qualysblog
April 2020 Patch Tuesday – 113 Vulns, 19 Critical, Zero-Day Patches, SharePoint, Adobe ColdFusion
2020-04-14 18:34:04
Managing CISA Known Exploited Vulnerabilities with Qualys VMDR
2022-02-23 05:39:00
mskb
mskb
April 14, 2020—KB4550957 (Security-only update)
2020-04-14 07:00:00
April 14, 2020—KB4550951 (Monthly Rollup)
2020-04-14 07:00:00
April 14, 2020—KB4550971 (Security-only update)
2020-04-14 07:00:00
nessus
nessus
KB4550957: Windows Server 2008 April 2020 Security Update
2020-04-14 00:00:00
KB4550965: Windows 7 and Windows Server 2008 R2 April 2020 Security Update
2020-04-14 00:00:00
KB4550970: Windows 8.1 and Windows Server 2012 R2 April 2020 Security Update
2020-04-14 00:00:00
kaspersky
kaspersky
KLA11743 Multiple vulnerabilities in Microsoft products (ESU)
2020-04-14 00:00:00
KLA11744 Multiple vulnerabilities in Microsoft Windows
2020-04-14 00:00:00
avleonov
avleonov
Microsoft Patch Tuesday April 2020: my classification script, confusing RCE in Adobe Type Manager and updates for older vulnerabilities
2020-04-26 01:24:38

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.4 High

AI Score

Confidence

High

0.953 High

EPSS

Percentile

99.4%

JSON
Related for NVD:CVE-2020-1020
attackerkb2nvd1prion2cve2cvelist2googleprojectzero2threatpost2mscve3cisa_kev2checkpoint_advisories2githubexploit2krebs1cert1thn1openvas9qualysblog2mskb14nessus10kaspersky2avleonov1