Comctl32 Remote Code Execution Vulnerability

🗓️ 12 Mar 2019 07:00:00Reported by MicrosoftType

mscve

mscve🔗 msrc.microsoft.com👁 58 Views

A remote code execution vulnerability in comctl32.dll allows an attacker to execute arbitrary code and gain user rights

Reporter	Title	Published	Views	Family All 43
CNVD	Microsoft Windows Remote Command Execution Vulnerability	13 Mar 201900:00	–	cnvd
CVE	CVE-2019-0765	9 Apr 201901:45	–	cve
Cvelist	CVE-2019-0765	9 Apr 201901:45	–	cvelist
Microsoft KB	March 12, 2019—KB4489868 (OS Build 17134.648)	12 Mar 201907:00	–	mskb
Microsoft KB	March 12, 2019—KB4489871 (OS Build 15063.1689)	12 Mar 201907:00	–	mskb
Microsoft KB	March 12, 2019—KB4489872 (OS Build 10240.18158)	12 Mar 201907:00	–	mskb
Microsoft KB	March 12, 2019—KB4489876 (Security-only update)	12 Mar 201907:00	–	mskb
Microsoft KB	March 12, 2019—KB4489878 (Monthly Rollup)	12 Mar 201907:00	–	mskb
Microsoft KB	March 12, 2019—KB4489880 (Monthly Rollup)	12 Mar 201907:00	–	mskb
Microsoft KB	March 12, 2019—KB4489881 (Monthly Rollup)	12 Mar 201907:00	–	mskb

Vulners

Node

microsoft windows_server_2012_r2_(server_core_installation)

OR

microsoft windows_server_2012_r2_(server_core_installation)

OR

microsoft windows_server_2012_r2

OR

microsoft windows_server_2012_r2

OR

microsoft windows_server_2012_(server_core_installation)

OR

microsoft windows_server_2012_(server_core_installation)

OR

microsoft windows_server_2012

OR

microsoft windows_server_2012

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1_(server_core_installation)

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1_(server_core_installation)

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1

OR

microsoft windows_server_2008_r2_for_itanium-based_systems_service_pack_1

OR

microsoft windows_server_2008_r2_for_itanium-based_systems_service_pack_1

OR

microsoft windows_server_2008_for_x64-based_systems_service_pack_2_(server_core_installation)

OR

microsoft windows_server_2008_for_x64-based_systems_service_pack_2_(server_core_installation)

OR

microsoft windows_server_2008_for_x64-based_systems_service_pack_2

OR

microsoft windows_server_2008_for_x64-based_systems_service_pack_2

OR

microsoft windows_server_2008_for_itanium-based_systems_service_pack_2

OR

microsoft windows_server_2008_for_itanium-based_systems_service_pack_2

OR

microsoft windows_server_2008_for_32-bit_systems_service_pack_2_(server_core_installation)

OR

microsoft windows_server_2008_for_32-bit_systems_service_pack_2_(server_core_installation)

OR

microsoft windows_server_2008_for_32-bit_systems_service_pack_2

OR

microsoft windows_server_2008_for_32-bit_systems_service_pack_2

OR

microsoft windows_rt_8.1

OR

microsoft windows_8.1_for_x64-based_systems

OR

microsoft windows_8.1_for_x64-based_systems

OR

microsoft windows_8.1_for_32-bit_systems

OR

microsoft windows_8.1_for_32-bit_systems

OR

microsoft windows_7_for_x64-based_systems_service_pack_1

OR

microsoft windows_7_for_x64-based_systems_service_pack_1

OR

microsoft windows_7_for_32-bit_systems_service_pack_1

OR

microsoft windows_7_for_32-bit_systems_service_pack_1

OR

microsoft windows_server_2016_(server_core_installation)

OR

microsoft windows_server_2016

OR

microsoft windows_10_version_1607_for_x64-based_systems

OR

microsoft windows_10_version_1607_for_32-bit_systems

OR

microsoft windows_10_for_x64-based_systems

OR

microsoft windows_10_for_32-bit_systems

OR

microsoft windows_server,_version_1709_(server_core_installation)

OR

microsoft windows_10_version_1709_for_arm64-based_systems

OR

microsoft windows_10_version_1709_for_x64-based_systems

OR

microsoft windows_10_version_1709_for_32-bit_systems

OR

microsoft windows_server_2019_(server_core_installation)

OR

microsoft windows_server_2019

OR

microsoft windows_10_version_1809_for_arm64-based_systems

OR

microsoft windows_10_version_1809_for_x64-based_systems

OR

microsoft windows_10_version_1809_for_32-bit_systems

OR

microsoft windows_10_version_1803_for_arm64-based_systems

OR

microsoft windows_server,_version_1803_(server_core_installation)

OR

microsoft windows_10_version_1803_for_x64-based_systems

OR

microsoft windows_10_version_1803_for_32-bit_systems

OR

microsoft windows_10_version_1703_for_x64-based_systems

OR

microsoft windows_10_version_1703_for_32-bit_systems

12 Mar 2019 07:00Current

1.8Low risk

Vulners AI Score1.8

CVSS 36.4 - 8.8

CVSS 29.3

EPSS0.1618

remote code execution comctl32.dll memory corruption internet explorer compromised websites security update