Not rated
CVE-2019-0707 An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys…
Description
An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length of a buffer prior to copying memory to it.To exploit the vulnerability, in a local attack scenario, an attacker could run a specially crafted application to elevate the attacker's privilege level, aka 'Windows NDIS Elevation of Privilege Vulnerability'.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Windows Server | 2019 | No fix stated |
| Windows Server | 2016 | No fix stated |
| Windows Server | 2012 | No fix stated |
| Windows | Versions not published | |
| Windows 10 Version 1903 for 32-bit Systems | Versions not published | |
| Windows 10 Version 1903 for x64-based Systems | Versions not published | |
| Windows 10 Version 1903 for ARM64-based Systems | Versions not published | |
| Windows Server, version 1903 (Server Core installation) | Versions not published |
Other CVEs of Windows Server
The 831 CVEs of Windows Server →
CVE-2020-1468
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its…
Not rated
CVE-2020-1463
An elevation of privilege vulnerability exists in the way that the SharedStream Library handles objects in memory, aka…
Not rated
CVE-2020-1438
An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects…
Not rated
CVE-2020-1436
A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted…
Not rated