CVE-2020-8950: Improper Link Resolution Before File Access

The AUEPLauncher service in Radeon AMD User Experience Program Launcher through 1.0.0.1 on Windows allows elevation of privilege by placing a crafted file in %PROGRAMDATA%\AMD\PPC\upload and then creating a symbolic link in %PROGRAMDATA%\AMD\PPC\temp that points to an arbitrary folder with an...

PT-2020-20388

Name of the Vulnerable Software and Affected Versions Radeon AMD User Experience Program Launcher version 1.0.0.1 Description The issue allows elevation of privilege by placing a crafted file in %PROGRAMDATA%AMDPPCupload and then creating a symbolic link in %PROGRAMDATA%AMDPPCtemp that points to ...