CVE-2020-9858 Vulnerability Details

  /     /     /  

CVE-2020-9858 Metadata Quick Info

CVE Published: 09/06/2020 | CVE Updated: 04/08/2024 | CVE Year: 2020
Source: apple | Vendor: Apple | Product: Windows Migration Assistant
Status : PUBLISHED

---

CVE-2020-9858 Description

A dynamic library loading issue was addressed with improved path searching. This issue is fixed in Windows Migration Assistant 2.2.0.0 (v. 1A11). Running the installer in an untrusted directory may result in arbitrary code execution.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: Running the installer in an untrusted directory may result in arbitrary code execution
Source: Apple

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).