2 lines
5.5 KiB
JSON
2 lines
5.5 KiB
JSON
{"affected":[{"affectedData":[{"cpes":["cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:x86:*"],"platforms":["32-bit Systems"],"product":"Windows 7","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"6.1.0","versionType":"custom"}]},{"cpes":["cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:x64:*"],"platforms":["x64-based Systems"],"product":"Windows 7 Service Pack 1","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"6.1.0","versionType":"custom"}]},{"cpes":["cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:*","cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:itanium:*"],"platforms":["32-bit Systems","IA64-based Systems"],"product":"Windows Server 2008 Service Pack 2","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"6.0.0","versionType":"custom"}]},{"cpes":["cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:*","cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x86:*"],"platforms":["32-bit Systems","x64-based Systems"],"product":"Windows Server 2008 Service Pack 2 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"6.0.0","versionType":"custom"}]},{"cpes":["cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x86:*"],"platforms":["x64-based Systems"],"product":"Windows Server 2008 Service Pack 2","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"6.0.0","versionType":"custom"}]},{"cpes":["cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:itanium:*"],"platforms":["IA64-based Systems"],"product":"Windows Server 2008 R2 Systems Service Pack 1","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"6.1.0","versionType":"custom"}]},{"cpes":["cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*"],"platforms":["x64-based Systems"],"product":"Windows Server 2008 R2 Service Pack 1","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"6.1.0","versionType":"custom"}]},{"cpes":["cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*"],"platforms":["x64-based Systems"],"product":"Windows Server 2008 R2 Service Pack 1 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"6.0.0","versionType":"custom"}]}],"source":"secure@microsoft.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*","matchCriteriaId":"C2B1C231-DE19-4B8F-A4AA-5B3A65276E46","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*","matchCriteriaId":"5F422A8C-2C4E-42C8-B420-E0728037E15C","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*","matchCriteriaId":"B320A104-9037-487E-BC9A-62B4A6B49FD0","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*","matchCriteriaId":"AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise a user’s system.\nThere are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document or by convincing a user to visit an untrusted webpage.\nThe update addresses the vulnerability by correcting how the Windows GDI component handles objects in memory."},{"lang":"es","value":"Existe una vulnerabilidad de divulgación de información cuando el componente GDI de Windows divulga inapropiadamente el contenido de su memoria, también se conoce como \"Windows Graphics Component Information Disclosure Vulnerability\". El ID de este CVE es diferente de CVE-2019-1143, CVE-2019-1158."}],"id":"CVE-2019-1154","lastModified":"2026-06-17T02:27:57.347","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"LOW","cvssData":{"accessComplexity":"LOW","accessVector":"LOCAL","authentication":"NONE","availabilityImpact":"NONE","baseScore":2.1,"confidentialityImpact":"PARTIAL","integrityImpact":"NONE","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","version":"2.0"},"exploitabilityScore":3.9,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":5.5,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":1.8,"impactScore":3.6,"source":"secure@microsoft.com","type":"Secondary"}]},"published":"2019-08-14T21:15:15.173","references":[{"source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"],"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1154"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1154"}],"sourceIdentifier":"secure@microsoft.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-200"}],"source":"nvd@nist.gov","type":"Primary"}]}
|