Information disclosure

2019-07-1519:15:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

6 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.279 Low

EPSS

Percentile

96.7%

JSON

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka ‘Windows GDI Information Disclosure Vulnerability’. This CVE ID is unique from CVE-2019-1095, CVE-2019-1098, CVE-2019-1099, CVE-2019-1100, CVE-2019-1101, CVE-2019-1116.

CPENameOperatorVersion
windows_10eq1607
windows_10eq1703
windows_10eq1709
windows_10eq1803
windows_10eq1809
windows_10eq1903
windows_7eq- sp1
windows_server_2008eqr2 sp1
windows_server_2008eq- sp2
windows_server_2008eq- sp2

Name	Operator	Version
windows_10	eq	1607
windows_10	eq	1703
windows_10	eq	1709
windows_10	eq	1803
windows_10	eq	1809
windows_10	eq	1903
windows_7	eq	- sp1
windows_server_2008	eq	r2 sp1
windows_server_2008	eq	- sp2
windows_server_2008	eq	- sp2