PT-2019-2468 · Microsoft · Windows Event Viewer+1

Sooraj K S · Published 2019-06-11 · Updated 2025-03-23 · CVE-2019-0948

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Windows Event Viewer (eventvwr.msc) (affected versions not specified)

Description The issue is related to an information disclosure problem in the Windows Event Viewer, which improperly handles XML input. This can be exploited by an attacker using a specially crafted XML file to read arbitrary files, potentially allowing access to sensitive information. The vulnerability is associated with the improper parsing of XML input containing a reference to an external entity.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XXE

Information Disclosure

Weakness Enumeration

CWE-611

CWE-200

Related Identifiers

BDU:2019-02246

CVE-2019-0948

ZDI-19-641

Affected Products

Windows

Windows Event Viewer

References · 10

• 🔥 https://exploit-db.com/exploits/40863 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-0948 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2019-0948 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-19-641 · Security Note
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0948 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-02246 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2019-0948 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-0948 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0948 · Security Note
• https://twitter.com/hyp3rlinx/status/1903604280105242647 · Twitter Post