Unrated severityNVD Advisory· Published Feb 12, 2020· Updated Aug 4, 2024

CVE-2020-8950

Description

The AUEPLauncher service in Radeon AMD User Experience Program Launcher through 1.0.0.1 on Windows allows elevation of privilege by placing a crafted file in %PROGRAMDATA%\AMD\PPC\upload and then creating a symbolic link in %PROGRAMDATA%\AMD\PPC\temp that points to an arbitrary folder with an arbitrary file name.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

AMD/Radeon AMD User Experience Program Launcherdescription
AMD/Radeon AMD User Experience Program Launcherllm-create
Range: <=1.0.0.1

Patches

Vulnerability mechanics

References

heynowyouseeme.blogspot.com/2020/02/another-privilege-escalation-filewrite.htmlmitrex_refsource_MISC
heynowyouseeme.blogspot.com/2020/02/privilege-escalation-filewrite-eop-in.htmlmitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000