Exploit for Incorrect Resource Transfer Between Spheres in Microsoft

githubexploit · 2020-05-12

Description

This is a proof of concept exploit for incorrect resource transfer in Windows Print Spooler.

Affected software

Microsoft Windows 10 All versions

Microsoft Windows 7 All versions

Microsoft Windows 8.1 All versions

Microsoft Windows Rt 8.1 All versions

All known vulnerabilities by product

Windows Windows Print Spooler

CVSS 7.8 for CVE-2020-1048

7.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector:LOCAL

Attack Complexity:LOW

Privileges Required:LOW

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

77%confidence this exploit runs

Based on 5 file(s) in the source

EPSS Score

16.5%higher than 96.6% of all CVEs

Updated 2026-06-16

Exploit Details

Modified:2025-10-04 13:57

Last Seen:2025-11-21 12:17

Reporter:ionescu007

Written in:C

Last commit:2020-05-13

Tags

print spoolerwindows vulnerabilityresource transfer errorproof of concept

Other exploits for CVE-2020-1048

PatchChecker - Web-based Check For Windows Privesc Vulnerabilities

2020-10-20 KitPloitKITPLOIT

Microsoft Spooler Local Privilege Elevation Exploit

2020-09-17 metasploitZDTRuby

Microsoft Spooler Local Privilege Elevation

2020-09-17 bwatters-r7PACKETSTORMRuby

Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Microsoft

2020-08-11 VoidSecGITHUB

Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Microsoft

2020-08-11 neofitoGITHUB

Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Microsoft

2020-07-21 math1asGITHUB

Exploit for Incorrect Resource Transfer Between Spheres in Microsoft

2020-06-23 shubham0dGITHUB

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft

2020-05-14 zveriuGITHUB

Exploit Code

README4 lines

## https://sploitus.com/exploit?id=A47F94B2-C417-53AA-9433-240A72B69227
# PrintDemon (CVE-2020-1048)

PrintDemon is a PoC for a series of issues in the Windows Print Spooler service, as well as potetial misuses of the functionality. Please read https://windows-internals.com/printdemon-cve-2020-1048/ for all of the information.