CVE-2019-0853: Microsoft Windows EMF File Uninitialized Pointer Remote Code Execution Vulnerability
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'.
Other sources
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of EMF graphics. The issue results from the lack of proper initialization of a pointer prior to accessing it. An attacker can leverage this vulnerability to execute code under the context of the current process.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2019-0853?
CVE-2019-0853 is categorized as a critical severity vulnerability that allows remote code execution.
How do I fix CVE-2019-0853?
To fix CVE-2019-0853, ensure that you apply the latest security updates provided by Microsoft for your version of Windows.
What versions of Windows are affected by CVE-2019-0853?
CVE-2019-0853 affects various versions of Windows, including Windows 7, 8.1, 10, and Windows Server variants.
What type of vulnerability is CVE-2019-0853?
CVE-2019-0853 is a remote code execution vulnerability in the Windows Graphics Device Interface (GDI).
Can CVE-2019-0853 be exploited remotely?
Yes, CVE-2019-0853 can be exploited by remote attackers to execute arbitrary code on vulnerable systems.