CVE-2019-1148— Microsoft Windows和Windows Server Graphics组件信息泄露漏洞

Microsoft Graphics Component Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The update addresses the vulnerability by correcting the way in which the Windows Graphics Component handles objects in memory.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

N/A

Microsoft Windows和Windows Server Graphics组件信息泄露漏洞

Microsoft Windows和Microsoft Windows Server都是美国微软（Microsoft）公司的产品。Microsoft Windows是一套个人设备使用的操作系统。Microsoft Windows Server是一套服务器操作系统。Windows Graphics Device Interface（GDI）是其中的一个图形设备接口。 Microsoft Windows Graphics组件中存在信息泄露漏洞，该漏洞源于程序没有正确处理内存对象。攻击者可通过登录到受影响系统并

N/A

N/A