GDI+ Remote Code Execution Vulnerability

🗓️ 10 Mar 2020 07:00:00Reported by MicrosoftType

mscve

mscve🔗 msrc.microsoft.com👁 35 Views

A remote code execution vulnerability exists in GDI

Reporter	Title	Published	Views	Family All 45
GithubExploit	Exploit for CVE-2020-0883	22 Apr 202009:10	–	githubexploit
Information Security Automation	Microsoft Patch Tuesday March 2020: a new record was set, SMBv3 “Wormable” RCE and updates for February goldies	22 Mar 202001:15	–	avleonov
CNVD	Microsoft Windows Graphics Device Interface Remote Code Execution Vulnerability	11 Mar 202000:00	–	cnvd
CVE	CVE-2020-0883	12 Mar 202015:48	–	cve
Cvelist	CVE-2020-0883	12 Mar 202015:48	–	cvelist
Microsoft KB	March 10, 2020—KB4540670 (OS Build 14393.3564)	10 Mar 202007:00	–	mskb
Microsoft KB	March 10, 2020—KB4540673 (OS Builds 18362.719 and 18363.719) - EXPIRED	10 Mar 202007:00	–	mskb
Microsoft KB	March 10, 2020—KB4540681 (OS Build 16299.1747)	10 Mar 202007:00	–	mskb
Microsoft KB	March 10, 2020—KB4540688 (Monthly Rollup)	10 Mar 202007:00	–	mskb
Microsoft KB	March 10, 2020—KB4540689 (OS Build 17134.1365)	10 Mar 202007:00	–	mskb

Vulners

Node

microsoft windows_10_version_1709_for_x64-based_systems

OR

microsoft windows_10_version_1709_for_32-bit_systems

OR

microsoft windows_server,_version_1909_(server_core_installation)

OR

microsoft windows_10_version_1909_for_arm64-based_systems

OR

microsoft windows_10_version_1909_for_x64-based_systems

OR

microsoft windows_server_2008_for_x64-based_systems_service_pack_2_(server_core_installation)

OR

microsoft windows_server_2008_for_x64-based_systems_service_pack_2_(server_core_installation)

OR

microsoft windows_server_2008_for_x64-based_systems_service_pack_2

OR

microsoft windows_server_2008_for_x64-based_systems_service_pack_2

OR

microsoft windows_10_for_32-bit_systems

OR

microsoft windows_server,_version_1903_(server_core_installation)

OR

microsoft windows_10_version_1903_for_arm64-based_systems

OR

microsoft windows_10_version_1903_for_x64-based_systems

OR

microsoft windows_10_version_1903_for_32-bit_systems

OR

microsoft windows_10_version_1709_for_arm64-based_systems

OR

microsoft windows_server_2008_for_32-bit_systems_service_pack_2_(server_core_installation)

OR

microsoft windows_server_2008_for_32-bit_systems_service_pack_2_(server_core_installation)

OR

microsoft windows_server_2008_for_32-bit_systems_service_pack_2

OR

microsoft windows_server_2008_for_32-bit_systems_service_pack_2

OR

microsoft windows_rt_8.1

OR

microsoft windows_8.1_for_x64-based_systems

OR

microsoft windows_8.1_for_x64-based_systems

OR

microsoft windows_8.1_for_32-bit_systems

OR

microsoft windows_8.1_for_32-bit_systems

OR

microsoft windows_7_for_x64-based_systems_service_pack_1

OR

microsoft windows_7_for_x64-based_systems_service_pack_1

OR

microsoft windows_7_for_32-bit_systems_service_pack_1

OR

microsoft windows_7_for_32-bit_systems_service_pack_1

OR

microsoft windows_server_2016_(server_core_installation)

OR

microsoft windows_server_2016

OR

microsoft windows_10_version_1607_for_x64-based_systems

OR

microsoft windows_10_version_1607_for_32-bit_systems

OR

microsoft windows_10_for_x64-based_systems

OR

microsoft windows_10_version_1909_for_32-bit_systems

OR

microsoft windows_server_2019_(server_core_installation)

OR

microsoft windows_server_2019

OR

microsoft windows_10_version_1809_for_arm64-based_systems

OR

microsoft windows_10_version_1809_for_x64-based_systems

OR

microsoft windows_10_version_1809_for_32-bit_systems

OR

microsoft windows_10_version_1803_for_arm64-based_systems

OR

microsoft windows_server,_version_1803_(server_core_installation)

OR

microsoft windows_10_version_1803_for_x64-based_systems

OR

microsoft windows_10_version_1803_for_32-bit_systems

OR

microsoft windows_server_2012_r2_(server_core_installation)

OR

microsoft windows_server_2012_r2_(server_core_installation)

OR

microsoft windows_server_2012_r2

OR

microsoft windows_server_2012_r2

OR

microsoft windows_server_2012_(server_core_installation)

OR

microsoft windows_server_2012_(server_core_installation)

OR

microsoft windows_server_2012

OR

microsoft windows_server_2012

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1_(server_core_installation)

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1_(server_core_installation)

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1

10 Mar 2020 07:00Current

8.8High risk

Vulners AI Score8.8

CVSS 3.18.8

CVSS 29.3

CVSS 36.7

EPSS0.53003

windows graphics device interface remote code execution memory handling user rights web-based attack file-sharing attack security update microsoft