CVE-2020-1097: Windows Graphics Component Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise a user’s system.</p> <p>There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document or by convincing a user to visit an untrusted webpage.</p> <p>The update addresses the vulnerability by correcting how the Windows GDI component handles objects in memory.</p>
Other sources
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows Graphics Component Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1091.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2020-1097?
The severity of CVE-2020-1097 is rated as important.
How do I fix CVE-2020-1097?
To fix CVE-2020-1097, apply the latest security updates provided by Microsoft for your affected Windows version.
What systems are affected by CVE-2020-1097?
CVE-2020-1097 affects various versions of Microsoft Windows including Windows 7, 8.1, 10, and Windows Server editions.
What type of attack does CVE-2020-1097 enable?
CVE-2020-1097 enables an attacker to potentially access sensitive information from the system's memory.
Can CVE-2020-1097 be exploited remotely?
Yes, CVE-2020-1097 can be exploited by attackers who have access to the system, making it critical to secure affected environments.