4.7
Moyenne
CVE-2019-1047 An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its…
Description
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user to visit an untrusted webpage. The security update addresses the vulnerability by correcting how the Windows GDI component handles objects in memory.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Windows 7 6.1 | 6.1.0 → dernières | Pas de correctif indiqué |
| Windows 7 Service Pack 1 6.1 | 6.1.0 → dernières | Pas de correctif indiqué |
| Windows Server 2008 Service Pack 2 6.0 | 6.0.0 → dernières | Pas de correctif indiqué |
| Windows Server 2008 Service Pack 2 (Server Core installation) 6.0 | 6.0.6003.0 → dernières | Pas de correctif indiqué |
| Windows Server 2008 Service Pack 2 6.0 | 6.0.6003.0 → dernières | Pas de correctif indiqué |
| Windows Server 2008 R2 Systems Service Pack 1 6.1 | 6.1.0 → dernières | Pas de correctif indiqué |
| Windows Server 2008 R2 Service Pack 1 6.1 | 6.1.7601.0 → dernières | Pas de correctif indiqué |
| Windows Server 2008 R2 Service Pack 1 (Server Core installation) 6.1 | 6.1.7601.0 → dernières | Pas de correctif indiqué |
Références
- Windows GDI Information Disclosure Vulnerability msrc.microsoft.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Windows 7
Les 947 CVE de Windows 7 →
CVE-2022-35759
Windows Local Security Authority (LSA) Denial of Service Vulnerability
6.5
Moyenne
CVE-2022-35758
Windows Kernel Memory Information Disclosure Vulnerability
5.5
Moyenne
CVE-2022-35756
Windows Kerberos Elevation of Privilege Vulnerability
7.8
Élevée
CVE-2022-35752
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
8.1
Élevée