CVE-2019-0903: Microsoft Windows

Описание

Оригинално описание

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'.

Засегнати продукти

• Microsoft Windows: 7 for 32-bit Systems Service Pack 1; 7 for x64-based Systems Service Pack 1; 8.1 for 32-bit systems; 8.1 for x64-based systems; RT 8.1; 10 for 32-bit Systems; 10 for x64-based Systems; 10 Version 1607 for 32-bit Systems; 10 Version 1607 for x64-based Systems; 10 Version 1703 for 32-bit Systems; 10 Version 1703 for x64-based Systems; 10 Version 1709 for 32-bit Systems; 10 Version 1709 for x64-based Systems; 10 Version 1803 for 32-bit Systems; 10 Version 1803 for x64-based Systems; 10 Version 1803 for ARM64-based Systems; 10 Version 1809 for 32-bit Systems; 10 Version 1809 for x64-based Systems; 10 Version 1809 for ARM64-based Systems; 10 Version 1709 for ARM64-based Systems
• Microsoft Windows Server: 2008 R2 for x64-based Systems Service Pack 1 (Core installation); 2008 R2 for Itanium-Based Systems Service Pack 1; 2008 R2 for x64-based Systems Service Pack 1; 2008 for 32-bit Systems Service Pack 2 (Core installation); 2012; 2012 (Core installation); 2012 R2; 2012 R2 (Core installation); 2016; 2016 (Core installation); version 1803 (Core Installation); 2019; 2019 (Core installation); 2008 for Itanium-Based Systems Service Pack 2; 2008 for 32-bit Systems Service Pack 2; 2008 for x64-based Systems Service Pack 2; 2008 for x64-based Systems Service Pack 2 (Core installation)
• Microsoft Windows 10 Version 1903 for 32-bit Systems: unspecified
• Microsoft Windows 10 Version 1903 for x64-based Systems: unspecified
• Microsoft Windows 10 Version 1903 for ARM64-based Systems: unspecified
• Microsoft Windows Server, version 1903 (Server Core installation): unspecified

История

Други уязвимости в Microsoft Windows

• 7.4CVE-2022-50238
• 7.4CVE-2025-59033
• 7.0CVE-2025-9491
• 5.0CVE-2022-40733
• 5.0CVE-2022-40732

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2019-0903
• https://nvd.nist.gov/vuln/detail/CVE-2019-0903
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0903
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-0903