What is CVE-2019-1016?

CVE-2019-1016 is a security advisory published by Microsoft Security Response Center (MSRC) with High severity. Windows GDI Information Disclosure Vulnerability

Which CVE IDs does CVE-2019-1016 cover?

CVE-2019-1016 covers the following CVE IDs: CVE-2019-1016. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of CVE-2019-1016?

CVE-2019-1016 has a CVSS v3 base score of 4.7, published by Microsoft Security Response Center (MSRC).

Which products are affected by CVE-2019-1016?

CVE-2019-1016 affects 10 products, including: Windows 7 for 32-bit Systems Service Pack 1; Windows 7 for x64-based Systems Service Pack 1; Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1; Windows Server 2008 R2 for x64-based Systems Service Pack 1; Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation); and others — see the full list on the advisory page.

CVE-2019-1016HighCVSS 4.7

Windows GDI Information Disclosure Vulnerability

Vendor

Microsoft Security Response Center (MSRC)

Published

June 11, 2019

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2019-1016 →

📋 Description

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user to visit an untrusted webpage. The security update addresses the vulnerability by correcting how the Windows GDI component handles objects in memory.

🎯 Affected products10

Windows 7 for 32-bit Systems Service Pack 1
Windows 7 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
Windows Server 2008 for 32-bit Systems Service Pack 2
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
Windows Server 2008 for Itanium-Based Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)

✅ Remediation

KB4503292 (Monthly Rollup) KB4503269 (Security Only) KB4503273 (Monthly Rollup) KB4503287 (Security Only)

🔗 CVE IDs covered (1)

📋 Description

🎯 Affected products10

✅ Remediation

🔗 References (9)