CVE-2019-1361

EUVD-2019-9919
An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics Components Information Disclosure Vulnerability'.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.5 MEDIUM
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 96%
Affected Products (NVD)
VendorProductVersion
microsoftwindows_7
-
𝑥
= Vulnerable software versions
Windows Releases
Platform
Version
Windows 7
Service Pack 1 (x64, x86)
KB4520003
Windows Server 2008 R2
Service Pack 1 (x64)
KB4520003
Service Pack 1 Server Core (x64)
KB4520003
Common Weakness Enumeration
References
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1361
https://www.zerodayinitiative.com/advisories/ZDI-19-867/
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1361
https://www.zerodayinitiative.com/advisories/ZDI-19-867/