HTTP: Microsoft Windows Kernel CVE-2020-1578 Information Disclosure

This signature detects attempts to exploit a known vulnerability against Microsoft Windows Kernel. A successful attack can lead to sensitive information disclosure.

Extended Description

An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass. An attacker who successfully exploited the vulnerability could retrieve the memory address of a kernel object. To exploit the vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The security update addresses the vulnerability by correcting how the Windows kernel handles memory addresses.

Affected Products

Microsoft windows_server_2019

References

CVE: CVE-2020-1578

Short Name

HTTP:INFO-LEAK:CVE-2020-1578-ID

Severity

Minor

Recommended

True

Recommended Action

Drop

HTTP: Microsoft Windows Kernel CVE-2020-1578 Information Disclosure

Extended Description

Affected Products

References

Found a potential security threat?