Microsoft Windows 'DirectWrite' API CVE-2019-1120 Remote Code Execution Vulnerability
BID:108937
Info
Microsoft Windows 'DirectWrite' API CVE-2019-1120 Remote Code Execution Vulnerability
| Bugtraq ID: | 108937 |
| Class: | Input Validation Error |
| CVE: |
CVE-2019-1120 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 09 2019 12:00AM |
| Updated: | Jul 09 2019 12:00AM |
| Credit: | Mateusz Jurczyk of Google Project Zero |
| Vulnerable: |
Microsoft Windows Server 2019 0 Microsoft Windows Server 1903 0 Microsoft Windows Server 1803 0 Microsoft Windows 10 Version 1903 for x64-based Systems 0 Microsoft Windows 10 Version 1903 for ARM64-based Systems 0 Microsoft Windows 10 Version 1903 for 32-bit Systems 0 Microsoft Windows 10 Version 1809 for x64-based Systems 0 Microsoft Windows 10 Version 1809 for ARM64-based Systems 0 Microsoft Windows 10 Version 1809 for 32-bit Systems 0 Microsoft Windows 10 Version 1803 for x64-based Systems 0 Microsoft Windows 10 Version 1803 for ARM64-based Systems 0 Microsoft Windows 10 Version 1803 for 32-bit Systems 0 Microsoft Windows 10 version 1709 for x64-based Systems 0 Microsoft Windows 10 Version 1709 for ARM64-based Systems 0 Microsoft Windows 10 version 1709 for 32-bit Systems 0 |
| Not Vulnerable: | |
Discussion
Microsoft Windows 'DirectWrite' API CVE-2019-1120 Remote Code Execution Vulnerability
Microsoft Windows is prone to a remote code-execution vulnerability.
An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions.
Microsoft Windows is prone to a remote code-execution vulnerability.
An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions.
Exploit / POC
Microsoft Windows 'DirectWrite' API CVE-2019-1120 Remote Code Execution Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Microsoft Windows 'DirectWrite' API CVE-2019-1120 Remote Code Execution Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Microsoft Windows 'DirectWrite' API CVE-2019-1120 Remote Code Execution Vulnerability
References:
References:
- Microsoft Homepage (Microsoft)
- CVE-2019-1120 | DirectWrite Remote Code Execution Vulnerability (Microsoft)