2 lines
11 KiB
JSON
2 lines
11 KiB
JSON
{"affected":[{"affectedData":[{"product":"Windows","vendor":"Microsoft","versions":[{"status":"affected","version":"10 Version 1803 for 32-bit Systems"},{"status":"affected","version":"10 Version 1803 for x64-based Systems"},{"status":"affected","version":"10 Version 1803 for ARM64-based Systems"},{"status":"affected","version":"10 Version 1809 for 32-bit Systems"},{"status":"affected","version":"10 Version 1809 for x64-based Systems"},{"status":"affected","version":"10 Version 1809 for ARM64-based Systems"},{"status":"affected","version":"10 Version 1709 for 32-bit Systems"},{"status":"affected","version":"10 Version 1709 for x64-based Systems"},{"status":"affected","version":"10 Version 1709 for ARM64-based Systems"},{"status":"affected","version":"10 for 32-bit Systems"},{"status":"affected","version":"10 for x64-based Systems"},{"status":"affected","version":"10 Version 1607 for 32-bit Systems"},{"status":"affected","version":"10 Version 1607 for x64-based Systems"},{"status":"affected","version":"7 for 32-bit Systems Service Pack 1"},{"status":"affected","version":"7 for x64-based Systems Service Pack 1"},{"status":"affected","version":"8.1 for 32-bit systems"},{"status":"affected","version":"8.1 for x64-based systems"},{"status":"affected","version":"RT 8.1"}]},{"product":"Windows Server","vendor":"Microsoft","versions":[{"status":"affected","version":"version 1803 (Core Installation)"},{"status":"affected","version":"2019"},{"status":"affected","version":"2019 (Core installation)"},{"status":"affected","version":"2016"},{"status":"affected","version":"2016 (Core installation)"},{"status":"affected","version":"2008 for 32-bit Systems Service Pack 2"},{"status":"affected","version":"2008 for 32-bit Systems Service Pack 2 (Core installation)"},{"status":"affected","version":"2008 for Itanium-Based Systems Service Pack 2"},{"status":"affected","version":"2008 for x64-based Systems Service Pack 2"},{"status":"affected","version":"2008 for x64-based Systems Service Pack 2 (Core installation)"},{"status":"affected","version":"2008 R2 for Itanium-Based Systems Service Pack 1"},{"status":"affected","version":"2008 R2 for x64-based Systems Service Pack 1"},{"status":"affected","version":"2008 R2 for x64-based Systems Service Pack 1 (Core installation)"},{"status":"affected","version":"2012"},{"status":"affected","version":"2012 (Core installation)"},{"status":"affected","version":"2012 R2"},{"status":"affected","version":"2012 R2 (Core installation)"}]},{"product":"Windows 10 Version 1909 for 32-bit Systems","vendor":"Microsoft","versions":[{"status":"affected","version":"unspecified"}]},{"product":"Windows 10 Version 1909 for x64-based Systems","vendor":"Microsoft","versions":[{"status":"affected","version":"unspecified"}]},{"product":"Windows 10 Version 1909 for ARM64-based Systems","vendor":"Microsoft","versions":[{"status":"affected","version":"unspecified"}]},{"product":"Windows Server, version 1909 (Server Core installation)","vendor":"Microsoft","versions":[{"status":"affected","version":"unspecified"}]},{"product":"Windows 10 Version 1903 for 32-bit Systems","vendor":"Microsoft","versions":[{"status":"affected","version":"unspecified"}]},{"product":"Windows 10 Version 1903 for x64-based Systems","vendor":"Microsoft","versions":[{"status":"affected","version":"unspecified"}]},{"product":"Windows 10 Version 1903 for ARM64-based Systems","vendor":"Microsoft","versions":[{"status":"affected","version":"unspecified"}]},{"product":"Windows Server, version 1903 (Server Core installation)","vendor":"Microsoft","versions":[{"status":"affected","version":"unspecified"}]}],"source":"secure@microsoft.com"}],"cisaActionDue":"2022-05-03","cisaExploitAdd":"2021-11-03","cisaRequiredAction":"Apply updates per vendor instructions.","cisaVulnerabilityName":"Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability","configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:x64:*","matchCriteriaId":"A045AC0A-471E-444C-B3B0-4CABC23E8CFB","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:x86:*","matchCriteriaId":"28A7FEE9-B473-48A0-B0ED-A5CC1E44194C","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*","matchCriteriaId":"5E491E46-1917-41FE-8F9A-BB0BDDEB42C3","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_10_1709:-:*:*:*:*:*:arm64:*","matchCriteriaId":"555C22C7-356D-4DA7-8CED-DA7423BBC6CF","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:arm64:*","matchCriteriaId":"40151476-C0FD-4336-8194-039E8827B7C8","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:x64:*","matchCriteriaId":"D82F8AF7-ED01-4649-849E-F248F0E02384","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:x86:*","matchCriteriaId":"C1CFB53B-B17B-47BD-BAC1-C6C5D168FFB6","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:*","matchCriteriaId":"73D24713-D897-408D-893B-77A61982597D","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*","matchCriteriaId":"306B7CE6-8239-4AED-9ED4-4C9F5B349F58","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*","matchCriteriaId":"345FCD64-D37B-425B-B64C-8B1640B7E850","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_10_1903:-:*:*:*:*:*:arm64:*","matchCriteriaId":"9E1ED169-6F03-4BD5-B227-5FA54DB40AD7","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_10_1903:-:*:*:*:*:*:x64:*","matchCriteriaId":"5C5B5180-1E12-45C2-8275-B9E528955307","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_10_1903:-:*:*:*:*:*:x86:*","matchCriteriaId":"B6A0DB01-49CB-4445-AFE8-57C2186857BA","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_10_1909:-:*:*:*:*:*:arm64:*","matchCriteriaId":"9285A9B5-4759-43E7-9589-CDBCA7100605","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_10_1909:-:*:*:*:*:*:x64:*","matchCriteriaId":"0D77EA14-F61D-4B9E-A385-70B88C482116","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_10_1909:-:*:*:*:*:*:x86:*","matchCriteriaId":"1A6FC9EE-D486-4AFE-A20E-4278468A1779","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*","matchCriteriaId":"C2B1C231-DE19-4B8F-A4AA-5B3A65276E46","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*","matchCriteriaId":"E93068DB-549B-45AB-8E5C-00EB5D8B5CF8","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*","matchCriteriaId":"C6CE5198-C498-4672-AF4C-77AB4BE06C5C","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_server_1903:-:*:*:*:*:*:*:*","matchCriteriaId":"530DF8C9-467C-4F4F-9FCA-CDD934BADF3C","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_server_1909:-:*:*:*:*:*:*:*","matchCriteriaId":"ADE7E7B1-64AC-4986-A50B-0918A42C05BB","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*","matchCriteriaId":"5F422A8C-2C4E-42C8-B420-E0728037E15C","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*","matchCriteriaId":"B320A104-9037-487E-BC9A-62B4A6B49FD0","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*","matchCriteriaId":"AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*","matchCriteriaId":"A7DF96F8-BA6A-4780-9CA3-F719B3F81074","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*","matchCriteriaId":"DB18C4CE-5917-401E-ACF7-2747084FD36E","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*","matchCriteriaId":"041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*","matchCriteriaId":"DB79EE26-FC32-417D-A49C-A1A63165A968","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format.For all systems except Windows 10, an attacker who successfully exploited the vulnerability could execute code remotely, aka 'Adobe Font Manager Library Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0938."},{"lang":"es","value":"Hay una vulnerabilidad de ejecución de código remota en Microsoft Windows cuando la Windows Adobe Type Manager Library maneja inapropiadamente un formato Adobe Type 1 PostScript de una fuente multi-master especialmente diseñada. En todos los sistemas, excepto en Windows 10, un atacante que explotara con éxito la vulnerabilidad podría ejecutar código remotamente, también se conoce como \"Adobe Font Manager Library Remote Code Execution Vulnerability\". Este ID de CVE es diferente de CVE-2020-0938."}],"id":"CVE-2020-1020","lastModified":"2026-06-17T03:00:14.250","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"MEDIUM","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"PARTIAL","baseScore":6.8,"confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","version":"2.0"},"exploitabilityScore":8.6,"impactScore":6.4,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":true}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2020-1020","options":[{"exploitation":"active"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2025-02-07T15:14:47.948142Z","version":"2.0.3"}}]},"published":"2020-04-15T15:15:20.857","references":[{"source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"],"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1020"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1020"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"],"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-1020"}],"sourceIdentifier":"secure@microsoft.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-787"}],"source":"nvd@nist.gov","type":"Primary"},{"description":[{"lang":"en","value":"CWE-787"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
|