Unscored CVE-2020-1885 EUVD-2020-12711GHSA-jmc3-547v-q3qv

Writing to an unprivileged file from a privileged OVRRedir.exe process in Oculus Desktop before 1.44.0.32849 on Windows allows local users …

Published Apr 8, 2020 · Updated Aug 4, 2024 · Assigned by facebook

Vendor: Facebook Product: Oculus Desktop

Description

Writing to an unprivileged file from a privileged OVRRedir.exe process in Oculus Desktop before 1.44.0.32849 on Windows allows local users to write to arbitrary files and consequently gain privileges via vectors involving a hard link to a log file.

Affected products

Vendor	Product	Affected	Fixed
Facebook	Oculus Desktop	1.44.0.328549	—

References

https://www.facebook.com/security/advisories/cve-2020-1885