PT-2019-2468 · Microsoft · Windows Event Viewer+1

Sooraj K S · Publicado 2019-06-11 · Atualizado 2025-03-23 · CVE-2019-0948

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Windows Event Viewer (eventvwr.msc) (affected versions not specified)

Description The issue is related to an information disclosure problem in the Windows Event Viewer, which improperly handles XML input. This can be exploited by an attacker using a specially crafted XML file to read arbitrary files, potentially allowing access to sensitive information. The vulnerability is associated with the improper parsing of XML input containing a reference to an external entity.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XXE

Information Disclosure

Enumeração de Fraquezas

CWE-611

CWE-200

Identificadores relacionados

BDU:2019-02246

CVE-2019-0948

ZDI-19-641

Produtos afetados

Windows

Windows Event Viewer

Referências · 10

• 🔥 https://exploit-db.com/exploits/40863 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-0948 · Nota de Segurança
• https://twitter.com/hyp3rlinx/status/1903604280105242647 · Publicação no Twitter
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2019-0948 · Aviso do Fabricante
• https://zerodayinitiative.com/advisories/ZDI-19-641 · Nota de Segurança
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0948 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2019-02246 · Nota de Segurança
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2019-0948 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-0948 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0948 · Nota de Segurança