CVE-2019-0618: A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution…

High severity · published Mar 5, 2019

CVE-2019-0618

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution…

8.8

CVSS

67%

EPSS

On KEV

Description

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0662.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack vector

Network

Complexity

Low

Privileges

None

User interaction

Required

Confidentiality

High

Integrity

High

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)67.0% · higher than 99% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Windows · Microsoft

7 for 32-bit Systems Service Pack 1; 7 for x64-based Systems Service Pack 1; 8.1 for 32-bit systems; 8.1 for x64-based systems; RT 8.1; 10 for 32-bit Systems; +14 more · source: vendor, NVD

Windows 7 · Microsoft

All versions, or not specified · source: NVD

Windows 8.1 · Microsoft

All versions, or not specified · source: NVD

Windows RT 8.1 · Microsoft

All versions, or not specified · source: NVD

Windows Server 2008 · Microsoft

r2; r2 · source: NVD

Windows Server 2012 · Microsoft

r2 · source: NVD

Windows Server 2016 · Microsoft

1709; 1803 · source: NVD