Tracker / CVE-2020-0601
CVE-2020-0601
Exploited High 8.1
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making it appear the file was from a trusted, legitimate source, aka 'Windows CryptoAPI Spoofing Vulnerability'.
Affected products and versions
| golang | go · 1.12 → 1.12.16 |
|---|---|
| golang | go · 1.13 → 1.13.7 |
| microsoft | windows_10_1507 |
| microsoft | windows_10_1607 |
| microsoft | windows_10_1709 |
| microsoft | windows_10_1803 |
| microsoft | windows_10_1809 |
| microsoft | windows_10_1903 |
| microsoft | windows_10_1909 |
| microsoft | windows_server_1803 |
| microsoft | windows_server_1903 |
| microsoft | windows_server_1909 |
| microsoft | windows_server_2016 |
| microsoft | windows_server_2019 |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.