CVE-2020-1455 | Date: (C)2020-08-12 (M)2024-01-26 |
A denial of service vulnerability exists when Microsoft SQL Server Management Studio (SSMS) improperly handles files. An attacker could exploit the vulnerability to trigger a denial of service.
To exploit the vulnerability, an attacker would first require execution on the victim system.
The security update addresses the vulnerability by ensuring Microsoft SQL Server Management Studio properly handles files.
CVSS Score and Metrics +CVSS Score and Metrics -CVSS V3 Severity: | CVSS V2 Severity: |
CVSS Score : 5.3 | CVSS Score : 2.1 |
Exploit Score: 1.8 | Exploit Score: 3.9 |
Impact Score: 3.4 | Impact Score: 2.9 |
|
CVSS V3 Metrics: | CVSS V2 Metrics: |
Attack Vector: LOCAL | Access Vector: LOCAL |
Attack Complexity: LOW | Access Complexity: LOW |
Privileges Required: NONE | Authentication: NONE |
User Interaction: REQUIRED | Confidentiality: NONE |
Scope: UNCHANGED | Integrity: NONE |
Confidentiality: LOW | Availability: PARTIAL |
Integrity: LOW | |
Availability: LOW | |
| |