CVE-2019-1012: Windows GDI Information Disclosure Vulnerability
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0968, CVE-2019-0977, CVE-2019-1009, CVE-2019-1010, CVE-2019-1011, CVE-2019-1013, CVE-2019-1015, CVE-2019-1016, CVE-2019-1046, CVE-2019-1047, CVE-2019-1048, CVE-2019-1049, CVE-2019-1050.
Other sources
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user to visit an untrusted webpage. The security update addresses the vulnerability by correcting how the Windows GDI component handles objects in memory.
— Microsoft
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2019-1012?
CVE-2019-1012 is classified as a critical information disclosure vulnerability.
How do I fix CVE-2019-1012?
To fix CVE-2019-1012, apply the relevant security updates provided by Microsoft for your specific Windows version.
What versions of Windows are affected by CVE-2019-1012?
CVE-2019-1012 affects multiple versions of Windows including Windows 7, 8.1, 10, and various Windows Server versions.
What kind of data could be exposed by CVE-2019-1012?
An attacker exploiting CVE-2019-1012 could gain access to sensitive information stored in memory, potentially compromising the system further.
Is there a workaround for CVE-2019-1012?
There are no specific workarounds for CVE-2019-1012, so applying the security updates is the recommended action.