CVE-2019-1143: Windows Graphics Component Information Disclosure Vulnerability
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows Graphics Component Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1154, CVE-2019-1158.
Other sources
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise a user’s system. There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document or by convincing a user to visit an untrusted webpage. The update addresses the vulnerability by correcting how the Windows GDI component handles objects in memory.
— NVD
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2019-1143?
CVE-2019-1143 has a severity rating of Important according to Microsoft's security guidelines.
How do I fix CVE-2019-1143?
To fix CVE-2019-1143, ensure that you apply the latest security updates provided by Microsoft for the affected Windows versions.
Which versions of Windows are vulnerable to CVE-2019-1143?
CVE-2019-1143 affects various versions of Windows, including Windows 10, Windows 7, Windows 8.1, and multiple Windows Server versions.
What type of vulnerability is CVE-2019-1143?
CVE-2019-1143 is classified as an information disclosure vulnerability in the Windows GDI component.
Can CVE-2019-1143 be exploited remotely?
Under specific conditions, CVE-2019-1143 can be exploited locally by a user running an application that is able to leverage this vulnerability.