CVE-2019-1170
Last modified
CVE-2019-1170 is a high-severity vulnerability rated 7.9/10 on the CVSS scale. An elevation of privilege vulnerability exists when reparse points are created by sandboxed processes allowing sandbox escape. An attacker who successfully exploited the vulnerability could use the sandbox escape to elevate privileges on an affected system. To exploit the vulnerability, an attacker would first have to log on to the system, and then run a specially crafted application to take control over the affected system. The security update addresses the vulnerability by preventing sandboxed processes from creating reparse points targeting inaccessible files.. EPSS estimates a 2.43% chance of exploitation in the next 30 days.
Description
An elevation of privilege vulnerability exists when reparse points are created by sandboxed processes allowing sandbox escape. An attacker who successfully exploited the vulnerability could use the sandbox escape to elevate privileges on an affected system. To exploit the vulnerability, an attacker would first have to log on to the system, and then run a specially crafted application to take control over the affected system. The security update addresses the vulnerability by preventing sandboxed processes from creating reparse points targeting inaccessible files.
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Windows 10 | 1809 |
| Microsoft | Windows 10 | 1903 |
| Microsoft | Windows Server 2016 | 1903 |
| Microsoft | Windows Server 2019 | All versions |
References
- http://packetstormsecurity.com/files/154192/Microsoft-Windows-SET_REPARSE_POINT_EX-Mount-Point-Security-Feature-Bypass.htmlThird Party Advisory, VDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1170Patch, Vendor Advisory
- http://packetstormsecurity.com/files/154192/Microsoft-Windows-SET_REPARSE_POINT_EX-Mount-Point-Security-Feature-Bypass.htmlThird Party Advisory, VDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1170Patch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2019-1170?
How severe is CVE-2019-1170?
How do I fix CVE-2019-1170?
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2019
- CVE-2019-11694A vulnerability exists in the Windows sandbox where an unini…
- CVE-2019-11695A custom cursor defined by scripting on a site can position …
- CVE-2019-11696Files with the .JNLP extension used for "Java web start" app…
- CVE-2019-11697If the ALT and "a" keys are pressed when users receive an ex…
- CVE-2019-11698If a crafted hyperlink is dragged and dropped to the bookmar…
- CVE-2019-11699A malicious page can briefly cause the wrong name to be high…
- CVE-2019-11700A hyperlink using the res: protocol can be used to open loca…
- CVE-2019-11701The default webcal: protocol handler will load a web site vu…
- CVE-2019-11702A hyperlink using protocols associated with Internet Explore…
- CVE-2019-11703A flaw in Thunderbird's implementation of iCal causes a heap…9.8
- CVE-2019-11704A flaw in Thunderbird's implementation of iCal causes a heap…9.8
- CVE-2019-11705A flaw in Thunderbird's implementation of iCal causes a stac…9.8
Are you affected by CVE-2019-1170?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST