Microsoft Windows Graphics Component Information Disclosure Vulnerability (CNVD-2016-09365)

Microsoft Windows is the popular computer operating system. An information disclosure vulnerability exists in the Windows Graphics Device Interface GDI processing memory object. An attacker could exploit this vulnerability to obtain sensitive information on the target system...

CVE-2016-3209: Exposure of Sensitive Information to an Unauthorized Actor

Graphics Device Interface aka GDI or GDI+ in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; Office 2007 SP3; Office 2010 SP2; Word Viewer; Skype for Business 2016; Lync...

PT-2016-3360 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to the fixed version Description: The issue is related to the Graphics Device Interface GDI in Microsoft Windows, which allows remote attackers to execute arbitrary code via a crafted web site. This is due to...

PT-2016-5417

Name of the Vulnerable Software and Affected Versions Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold, 1511, and 1607 Office 2007 SP3 Office 2010 SP2 Word Viewer Skype for Business 2016 Lync 20...

Windows Privilege Escalation

The vulnerability of the Graphics Device Interface GDI component in the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating locally, to enhance their privileges through a specially created application...

Windows Code Execution

The vulnerability of the Graphics Device Interface GDI component in the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted document...

Windows OS ASLR Bypass

The vulnerability of the Graphics Device Interface GDI component in the Windows operating system is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to bypass the ASLR protection mechanism by using a specially created application...

CVE-2016-3355

The Graphics Device Interface GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application, aka "GDI Elevatio...

CVE-2016-3354

The Graphics Device Interface GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows local users to bypass the ASLR protection mechanism via a crafted...

Information disclosure

The Graphics Device Interface GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows local users to bypass the ASLR protection mechanism via a crafted...

Remote code execution

The Graphics Device Interface GDI in Microsoft Windows 10 1607 allows remote attackers to execute arbitrary code via a crafted document, aka "GDI Remote Code Execution Vulnerability."...

Privilege escalation

The Graphics Device Interface GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application, aka "GDI Elevatio...

CVE-2016-3354: Undefined Security Weakness

The Graphics Device Interface GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows local users to bypass the ASLR protection mechanism via a crafted...

CVE-2016-3356: Improper Restriction of Operations within the Bounds of a Memory Buffer

The Graphics Device Interface GDI in Microsoft Windows 10 1607 allows remote attackers to execute arbitrary code via a crafted document, aka "GDI Remote Code Execution Vulnerability."...

CVE-2016-3355: Undefined Security Weakness

The Graphics Device Interface GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application, aka "GDI Elevatio...

Microsoft Windows GDI Memory Corruption Vulnerability

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. Graphics Device Interface GDI is one of the graphics device interface components. A memory corruption vulnerability exists in the Graphics Device Interface in Microsoft Windows. A remote attacker coul...

Microsoft Windows GDI Elevation of Privilege Vulnerability

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. Graphics Device Interface GDI is one of the graphics device interface components. An elevation of privilege vulnerability exists in the Graphics Device Interface in Microsoft Windows. An attacker can...

Microsoft Windows GDI Information Disclosure Vulnerability

Microsoft Windows is a family of operating systems released by Microsoft Corporation in the United States. Graphics Device Interface GDI is one of the graphics device interface components. An information disclosure vulnerability exists in the Graphics Device Interface in Microsoft Windows that...

GDI+ Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface GDI handles objects in the memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or dele...

CVE-2016-3251

The GDI component in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to obtain sensitive kernel-address information via a crafte...