VYPR
← All advisories
High severity7.8NVD Advisory· Published Oct 23, 2020· Updated Jun 17, 2026

CVE-2020-9331

CVE-2020-9331

Description

CryptoPro CSP through 5.0.0.10004 on 32-bit platforms allows Local Privilege Escalation (by local users with the SeChangeNotifyPrivilege right) because user-mode input is mishandled during process creation. An attacker can write arbitrary data to an arbitrary location in the kernel's address space.

Affected products

3
  • CryptoPro/CSP2 versions
    cpe:2.3:a:cryptopro:csp:*:*:*:*:*:*:x86:*+ 1 more
    • cpe:2.3:a:cryptopro:csp:*:*:*:*:*:*:x86:*range: <5.0.0.10004
    • (no CPE)range: <=5.0.0.10004
  • CryptoPro/CSPdescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.