Lucene search

MicrosoftCVE-2018-8422

HistorySep 13, 2018 - 12:29 a.m.

CVE-2018-8422

2018-09-1300:29:02

CWE-200

microsoft

web.nvd.nist.gov

cve-2018-8422

information disclosure

windows gdi

windows 7

windows server 2008 r2

nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

AI Score

6.3

Confidence

High

EPSS

0.64

Percentile

97.9%

JSON

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka “Windows GDI Information Disclosure Vulnerability.” This affects Windows 7, Windows Server 2008 R2. This CVE ID is unique from CVE-2018-8424.

Affected configurations

Nvd

Vulners

Node

microsoftwindows_7Match-sp1

microsoftwindows_serverMatch2008r2sp1itanium

microsoftwindows_serverMatch2008r2sp1x64

VendorProductVersionCPE
microsoftwindows_7-cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*
microsoftwindows_server2008cpe:2.3:o:microsoft:windows_server:2008:r2:sp1:*:*:*:itanium:*
microsoftwindows_server2008cpe:2.3:o:microsoft:windows_server:2008:r2:sp1:*:*:*:x64:*

Vendor	Product	Version	CPE
microsoft	windows_7	-	cpe:2.3:o:microsoft:windows_7:-:sp1::::::
microsoft	windows_server	2008	cpe:2.3:o:microsoft:windows_server:2008:r2:sp1::::itanium:
microsoft	windows_server	2008	cpe:2.3:o:microsoft:windows_server:2008:r2:sp1::::x64:

CNA Affected

[
  {
    "product": "Windows 7",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "32-bit Systems Service Pack 1"
      },
      {
        "status": "affected",
        "version": "x64-based Systems Service Pack 1"
      }
    ]
  },
  {
    "product": "Windows Server 2008 R2",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "Itanium-Based Systems Service Pack 1"
      },
      {
        "status": "affected",
        "version": "x64-based Systems Service Pack 1"
      },
      {
        "status": "affected",
        "version": "x64-based Systems Service Pack 1 (Server Core installation)"
      }
    ]
  }
]