Microsoft Windows 'DirectWrite' API CVE-2019-1127 Remote Code Execution Vulnerability

Bugtraq ID:	108942
Class:	Input Validation Error
CVE:	CVE-2019-1127
Remote:	Yes
Local:	No
Published:	Jul 09 2019 12:00AM
Updated:	Jul 09 2019 12:00AM
Credit:	Mateusz Jurczyk of Google Project Zero
Vulnerable:	Microsoft Windows Server 2019 0 Microsoft Windows Server 1903 0 Microsoft Windows Server 1803 0 Microsoft Windows 10 Version 1903 for x64-based Systems 0 Microsoft Windows 10 Version 1903 for ARM64-based Systems 0 Microsoft Windows 10 Version 1903 for 32-bit Systems 0 Microsoft Windows 10 Version 1809 for x64-based Systems 0 Microsoft Windows 10 Version 1809 for ARM64-based Systems 0 Microsoft Windows 10 Version 1809 for 32-bit Systems 0 Microsoft Windows 10 Version 1803 for x64-based Systems 0 Microsoft Windows 10 Version 1803 for ARM64-based Systems 0 Microsoft Windows 10 Version 1803 for 32-bit Systems 0 Microsoft Windows 10 version 1709 for x64-based Systems 0 Microsoft Windows 10 Version 1709 for ARM64-based Systems 0 Microsoft Windows 10 version 1709 for 32-bit Systems 0
Not Vulnerable:

Microsoft Windows 'DirectWrite' API CVE-2019-1127 Remote Code Execution Vulnerability

Microsoft Windows is prone to a remote code-execution vulnerability.

An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions.

Microsoft Windows 'DirectWrite' API CVE-2019-1127 Remote Code Execution Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Microsoft Windows 'DirectWrite' API CVE-2019-1127 Remote Code Execution Vulnerability

References:

• Microsoft Homepage (Microsoft)
  
• CVE-2019-1127 | DirectWrite Remote Code Execution Vulnerability (Microsoft)