CVE-2020-1167: Microsoft Graphics Components Remote Code Execution Vulnerability
<p>A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code on a target system.</p> <p>To exploit the vulnerability, a user would have to open a specially crafted file.</p> <p>The security update addresses the vulnerability by correcting how Microsoft Graphics Components handle objects in memory.</p>
Other sources
A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics Components Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-16923.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2020-1167?
CVE-2020-1167 is a vulnerability in Microsoft 3D Builder that allows remote code execution.
What software versions are affected by CVE-2020-1167?
Microsoft 3D Builder and various versions of Microsoft Windows 10 and Windows Server 2016/2019 are affected by CVE-2020-1167.
What is the severity of CVE-2020-1167?
The severity of CVE-2020-1167 is critical with a CVSS score of 7.8.
How can CVE-2020-1167 be exploited?
CVE-2020-1167 can be exploited through user interaction by visiting a malicious page or opening a malicious file.
Are there any references for CVE-2020-1167?
Yes, you can find references for CVE-2020-1167 at the following links: [link1](https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1167), [link2](https://www.zerodayinitiative.com/advisories/ZDI-20-1247/), [link3](https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2020-1167).