CVE-2020-1015 PoC — Microsoft Windows User-Mode Power Service 安全漏洞

Source

https://github.com/0xeb-bp/cve-2020-1015

Associated Vulnerability

Title: Microsoft Windows User-Mode Power Service 安全漏洞 (CVE-2020-1015)
Description:An elevation of privilege vulnerability exists in the way that the User-Mode Power Service (UMPS) handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0934, CVE-2020-0983, CVE-2020-1009, CVE-2020-1011.

Description

PoC for CVE-2020-1015

Readme

# CVE-2020-1015
PoC for CVE-2020-1015

More detail available [here](https://0xeb-bp.github.io/blog/2020/05/12/cve-2020-1015-analysis.html)

To compile:
1. Create an empty C++ project in Visual Studio.
2. Add `cve_2020_1015.cpp` and `Source.idl` to the project as source files.
3. Compile `Source.idl`. This will generate three files: `Source_c.c`, `Source_h.h` and `Source_s.c`. 
4. Add the first two as source files to the project. 
5. Add `rpcrt4.lib` as an additional dependency to the project
6. Build!

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →