CVE-2020-0683 PoC — Microsoft Windows Installer 安全漏洞

Source

https://github.com/padovah4ck/CVE-2020-0683

Associated Vulnerability

Title: Microsoft Windows Installer 安全漏洞 (CVE-2020-0683)
Description:An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0686.

Description

CVE-2020-0683 - Windows MSI “Installer service” Elevation of Privilege

Readme

# CVE-2020-0683
Original Poc sent to MSRC. 
Assigned to CVE-2020-0683 - Windows Installer Elevation of Privilege

https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2020-0683 

Source code for Visual Studio C++ 2017 

Please read the PDF that describes all the findings and steps to reproduce.

Inside "bin_MsiExploit" you'll find the exploit (exe) to execute.

DEMO
![Screenshot](msi_eop.gif?raw=true)  

---

![Beer](https://icons.iconarchive.com/icons/flat-icons.com/flat/48/Beer-icon.png)  [Buy me a beer if you like ;-)](https://www.buymeacoffee.com/padovah4ck)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →