SB2020090833 - Multiple vulnerabilities in Microsoft OneDrive for Windows

Description

This security bulletin contains information about 3 secuirty vulnerabilities.

1) UNIX symbolic link following (CVE-ID: CVE-2020-16851)

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to the OneDrive for Windows Desktop application improperly handles symbolic links. A local user can run a specially crafted application and delete a targeted file with an elevated status. .

Successful exploitation of this vulnerability may result in privilege escalation.

2) UNIX symbolic link following (CVE-ID: CVE-2020-16852)

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to the OneDrive for Windows Desktop application improperly handles symbolic links. A local user can run a specially crafted application and delete a targeted file with an elevated status. .

Successful exploitation of this vulnerability may result in privilege escalation.

3) UNIX symbolic link following (CVE-ID: CVE-2020-16853)

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to the OneDrive for Windows Desktop application improperly handles symbolic links. A local user can run a specially crafted application and delete a targeted file with an elevated status. .

Successful exploitation of this vulnerability may result in privilege escalation.

Remediation

Install update from vendor's website.

References

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16851
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16852
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16853