PT-2018-2113 · Microsoft · Windows Server 2016+12

Behzad Najjarpour Jabbari + 2 · Published 2018-12-11 · Updated 2020-08-24 · CVE-2018-8595

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2008 Windows Server 2019 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers

Description The issue is related to an information disclosure vulnerability in the Windows GDI component, which improperly discloses the contents of its memory. This can be exploited by attackers to obtain sensitive information using a specially crafted document. The vulnerability is associated with errors in the mechanisms for handling objects in memory.

Recommendations For Windows 7, consider applying configuration changes to restrict access to sensitive information until a patch is available. For Windows Server 2012 R2, restrict access to the GDI component to minimize the risk of exploitation. For Windows RT 8.1, avoid using specially crafted documents that could trigger the vulnerability. For Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, and Windows 10 Servers, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2019-00064

CVE-2018-8595

ZDI-18-1403

ZDI-18-1430

Affected Products

Windows

Windows 10

Windows 10 Servers

Windows 7

Windows 8.1

Windows Gdi

Windows Rt 8.1

Windows Server 2008

Windows Server 2008 R2

Windows Server 2012

Windows Server 2012 R2

Windows Server 2016

Windows Server 2019

References · 10

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8595 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-8595 · Security Note
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8595 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2018-8595 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-18-1403 · Security Note
• https://bdu.fstec.ru/vul/2019-00064 · Security Note
• https://osv.dev/vulnerability/CVE-2018-8595 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-18-1430 · Security Note
• https://aha.org/system/files/2019-01/tpl-white-flash-jan-2-2019--ab-000102-mw.pdf · Note
• http://securityfocus.com/bid/106083 · Note