CVE-2020-1020 PoC — Microsoft Windows和Microsoft Windows Server 安全漏洞

Source

https://github.com/KaLendsi/CVE-2020-1020

Associated Vulnerability

Title: Microsoft Windows和Microsoft Windows Server 安全漏洞 (CVE-2020-1020)
Description:A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format.For all systems except Windows 10, an attacker who successfully exploited the vulnerability could execute code remotely, aka 'Adobe Font Manager Library Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0938.

Description

Windows Font Driver Type 1 VToHOrigin stack corruption

Readme

# CVE-2020-1020
Windows Font Driver Type 1 VToHOrigin stack corruption

only works on win7 x64

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →