GDI+ Remote Code Execution Vulnerability

🗓️ 14 May 2019 07:00:00Reported by MicrosoftType

mscve

mscve🔗 msrc.microsoft.com👁 28 Views

A remote code execution vulnerability in Windows GDI+ allows attackers to take control of affected systems and perform unauthorized actions

Reporter	Title	Published	Views	Family All 53
ATTACKERKB	CVE-2019-0903	16 May 201900:00	–	attackerkb
Circl	CVE-2019-0903	14 Jun 202321:10	–	circl
CISA KEV Catalog	Microsoft GDI Remote Code Execution Vulnerability	25 Mar 202200:00	–	cisa_kev
Check Point Advisories	Microsoft GDI+ Remote Code Execution (CVE-2019-0903)	14 May 201900:00	–	checkpoint_advisories
CVE	CVE-2019-0903	16 May 201918:17	–	cve
Cvelist	CVE-2019-0903	16 May 201918:17	–	cvelist
Microsoft KB	May 14, 2019—KB4494440 (OS Build 14393.2969) - EXPIRED	14 May 201907:00	–	mskb
Microsoft KB	May 14, 2019—KB4494441 (OS Build 17763.503)	14 May 201907:00	–	mskb
Microsoft KB	Windows 10 Insider Preview Build 18362.113	14 May 201907:00	–	mskb
Microsoft KB	May 14, 2019—KB4499149 (Monthly Rollup)	14 May 201907:00	–	mskb

Vulners

Node

microsoft windows_10_version_1903_for_32-bit_systems

OR

microsoft windows_server_2012_r2_(server_core_installation)

OR

microsoft windows_server_2012_r2_(server_core_installation)

OR

microsoft windows_server_2012_r2

OR

microsoft windows_server_2012_r2

OR

microsoft windows_server_2012_(server_core_installation)

OR

microsoft windows_server_2012_(server_core_installation)

OR

microsoft windows_server_2012

OR

microsoft windows_server_2012

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1_(server_core_installation)

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1_(server_core_installation)

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1

OR

microsoft windows_server_2008_r2_for_itanium-based_systems_service_pack_1

OR

microsoft windows_server_2008_r2_for_itanium-based_systems_service_pack_1

OR

microsoft windows_server,_version_1903_(server_core_installation)

OR

microsoft windows_10_version_1903_for_arm64-based_systems

OR

microsoft windows_10_version_1903_for_x64-based_systems

OR

microsoft windows_server_2008_for_x64-based_systems_service_pack_2_(server_core_installation)

OR

microsoft windows_server_2008_for_x64-based_systems_service_pack_2_(server_core_installation)

OR

microsoft windows_server_2008_for_x64-based_systems_service_pack_2

OR

microsoft windows_server_2008_for_x64-based_systems_service_pack_2

OR

microsoft windows_server_2008_for_itanium-based_systems_service_pack_2

OR

microsoft windows_server_2008_for_itanium-based_systems_service_pack_2

OR

microsoft windows_server_2008_for_32-bit_systems_service_pack_2_(server_core_installation)

OR

microsoft windows_server_2008_for_32-bit_systems_service_pack_2_(server_core_installation)

OR

microsoft windows_server_2008_for_32-bit_systems_service_pack_2

OR

microsoft windows_server_2008_for_32-bit_systems_service_pack_2

OR

microsoft windows_rt_8.1

OR

microsoft windows_8.1_for_x64-based_systems

OR

microsoft windows_8.1_for_x64-based_systems

OR

microsoft windows_8.1_for_32-bit_systems

OR

microsoft windows_8.1_for_32-bit_systems

OR

microsoft windows_7_for_x64-based_systems_service_pack_1

OR

microsoft windows_7_for_x64-based_systems_service_pack_1

OR

microsoft windows_7_for_32-bit_systems_service_pack_1

OR

microsoft windows_7_for_32-bit_systems_service_pack_1

OR

microsoft windows_server_2016_(server_core_installation)

OR

microsoft windows_server_2016

OR

microsoft windows_10_version_1607_for_x64-based_systems

OR

microsoft windows_10_version_1607_for_32-bit_systems

OR

microsoft windows_10_for_x64-based_systems

OR

microsoft windows_10_for_32-bit_systems

OR

microsoft windows_10_version_1709_for_arm64-based_systems

OR

microsoft windows_10_version_1709_for_x64-based_systems

OR

microsoft windows_10_version_1709_for_32-bit_systems

OR

microsoft windows_server_2019_(server_core_installation)

OR

microsoft windows_server_2019

OR

microsoft windows_10_version_1809_for_arm64-based_systems

OR

microsoft windows_10_version_1809_for_x64-based_systems

OR

microsoft windows_10_version_1809_for_32-bit_systems

OR

microsoft windows_10_version_1803_for_arm64-based_systems

OR

microsoft windows_server,_version_1803_(server_core_installation)

OR

microsoft windows_10_version_1803_for_x64-based_systems

OR

microsoft windows_10_version_1803_for_32-bit_systems

OR

microsoft windows_10_version_1703_for_x64-based_systems

OR

microsoft windows_10_version_1703_for_32-bit_systems

14 May 2019 07:00Current

7.9High risk

Vulners AI Score7.9

CVSS 3.18.8

CVSS 29.3

CVSS 38.8

EPSS0.34444

SSVC

remote code execution windows gdi memory objects web-based attack file-sharing attack security update microsoft