CVEvulnerability
CVE-2019-1148
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2019-08-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-125
Description
An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.
To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.
The update addresses the vulnerability by correcting the way in which the Windows Graphics Component handles objects in memory.
Affected configurations
• microsoft office 2019
• microsoft windows 10
• microsoft windows 10 1607
• microsoft windows 10 1703
• microsoft windows 10 1709
• microsoft windows 10 1803
• microsoft windows 10 1809
• microsoft windows 10 1903
• microsoft windows 7
• microsoft windows 8.1
• microsoft windows rt 8.1
• microsoft windows server 2008
• microsoft windows server 2008 r2
• microsoft windows server 2012
• microsoft windows server 2012 r2
• microsoft windows server 2016
• microsoft windows server 2016 1803
• microsoft windows server 2016 1903
• microsoft windows server 2019
Related
Weakness · CWE (1)
- CWE-125 Out-of-bounds Read weakness
References
- http://packetstormsecurity.com/files/154084/Microsoft-Font-Subsetting-DLL-GetGlyphId-Out-Of-Bounds-Read.html Third Party Advisory, VDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1148 Patch, Vendor Advisory
- http://packetstormsecurity.com/files/154084/Microsoft-Font-Subsetting-DLL-GetGlyphId-Out-Of-Bounds-Read.html Third Party Advisory, VDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1148 Patch, Vendor Advisory