PT-2020-1703 · Microsoft · Windows

Hossein Lotfi · Published 2020-02-11 · Updated 2022-01-01 · CVE-2020-0744

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Windows (affected versions not specified)

Description An information disclosure issue exists in the way the Windows Graphics Device Interface (GDI) handles objects in memory. This allows an attacker to retrieve information from a targeted system. The vulnerability is related to errors in the mechanisms for processing objects in memory and can be exploited using a specially crafted application. It affects the system's ability to protect sensitive information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Buffer Overflow

Weakness Enumeration

CWE-125

CWE-119

Related Identifiers

BDU:2020-00936

CVE-2020-0744

ZDI-20-552

ZDI-20-578

Affected Products

Windows

References · 9

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0744 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-0744 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-20-578 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-20-552 · Security Note
• https://osv.dev/vulnerability/CVE-2020-0744 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2020-0744 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0744 · Security Note
• https://bdu.fstec.ru/vul/2020-00936 · Security Note
• https://t.me/cvenotify/889 · Telegram Post