PT-2019-2761 · Microsoft · Windows Directwrite+1

Publicado 2019-07-09 · Atualizado 2019-07-16 · CVE-2019-1097

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Windows DirectWrite (affected versions not specified)

Description The issue is related to an information disclosure problem where DirectWrite improperly handles memory, potentially allowing attackers to obtain sensitive information. This could affect the system's security.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

BDU:2019-02698

CVE-2019-1097

ZDI-19-647

Produtos afetados

Windows Directwrite

Windows

Referências · 7

• https://zerodayinitiative.com/advisories/ZDI-19-647 · Nota de Segurança
• https://bdu.fstec.ru/vul/2019-02698 · Nota de Segurança
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1097 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-1097 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-1097 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1097 · Nota de Segurança
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2019-1097 · Aviso do Fabricante