CVE-2019-1432

Description

An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka DirectWrite Information Disclosure Vulnerability. This CVE ID is unique from CVE-2019-1411.

Risk Information

Base Score
4.4
MODERATE
Vector
CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
EPSS Score
Exploitation Probability
25.898

Associated Vulnerability

VulnerabilityOS Platform
Windows Graphics Component Elevation of Privilege Vulnerability for Windows Server 2012 for x64-based Systems (KB4525246)Windows
Windows Graphics Component Elevation of Privilege Vulnerability for Windows Server 2012 for x64-based Systems (KB4525253)Windows
Windows Graphics Component Elevation of Privilege Vulnerability for Windows 7 for x86-based Systems (KB4525235)Windows
Windows Graphics Component Elevation of Privilege Vulnerability for Windows 7 for x64-based Systems (KB4525235)Windows
Windows Graphics Component Elevation of Privilege Vulnerability for Windows Server 2008 R2 for x64-based Systems (KB4525235)Windows
Windows Graphics Component Elevation of Privilege Vulnerability for Windows 7 for x64-based Systems (KB4525233)Windows
Windows Graphics Component Elevation of Privilege Vulnerability for Windows Server 2008 R2 for x64-based Systems (KB4525233)Windows
Windows Graphics Component Elevation of Privilege Vulnerability for Windows 7 for x86-based Systems (KB4525233)Windows
Windows Graphics Component Elevation of Privilege Vulnerability for Windows Server 2008 for x64-based Systems (KB4525234)Windows
Windows Graphics Component Elevation of Privilege Vulnerability for Windows Server 2008 for x86-based Systems (KB4525234)Windows
Windows Graphics Component Elevation of Privilege Vulnerability for Windows Server 2008 for x86-based Systems (KB4525239)Windows
Windows Graphics Component Elevation of Privilege Vulnerability for Windows Server 2008 for x64-based Systems (KB4525239)Windows
Windows Graphics Component Elevation of Privilege Vulnerability for Windows 8.1 for x86-based Systems (KB4525243)Windows
Windows Graphics Component Elevation of Privilege Vulnerability for Windows 8.1 for x64-based Systems (KB4525243)Windows
Windows Graphics Component Elevation of Privilege Vulnerability for Windows Server 2012 R2 for x64-based Systems (KB4525243)Windows
Windows Graphics Component Elevation of Privilege Vulnerability for Windows Server 2012 R2 for x64-based Systems (KB4525250)Windows
Windows Graphics Component Elevation of Privilege Vulnerability for Windows 8.1 for x86-based Systems (KB4525250)Windows
Windows Graphics Component Elevation of Privilege Vulnerability for Windows 8.1 for x64-based Systems (KB4525250)Windows

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-277492019-11 Security Monthly Quality Rollup for Windows Server 2012 for x64-based Systems (KB4525246)
PATCH-277672019-11 Security Only Quality Update for Windows Server 2012 for x64-based Systems (KB4525253)
PATCH-277432019-11 Security Monthly Quality Rollup for Windows 7 for x86-based Systems (KB4525235)
PATCH-277442019-11 Security Monthly Quality Rollup for Windows 7 for x64-based Systems (KB4525235)
PATCH-277452019-11 Security Monthly Quality Rollup for Windows Server 2008 R2 for x64-based Systems (KB4525235)
PATCH-277612019-11 Security Only Quality Update for Windows 7 for x64-based Systems (KB4525233)
PATCH-277622019-11 Security Only Quality Update for Windows Server 2008 R2 for x64-based Systems (KB4525233)
PATCH-277632019-11 Security Only Quality Update for Windows 7 for x86-based Systems (KB4525233)
PATCH-277412019-11 Security Monthly Quality Rollup for Windows Server 2008 for x64-based Systems (KB4525234)
PATCH-277422019-11 Security Monthly Quality Rollup for Windows Server 2008 for x86-based Systems (KB4525234)
PATCH-277592019-11 Security Only Quality Update for Windows Server 2008 for x86-based Systems (KB4525239)
PATCH-277602019-11 Security Only Quality Update for Windows Server 2008 for x64-based Systems (KB4525239)
PATCH-277462019-11 Security Monthly Quality Rollup for Windows 8.1 for x86-based Systems (KB4525243)
PATCH-277472019-11 Security Monthly Quality Rollup for Windows 8.1 for x64-based Systems (KB4525243)
PATCH-277482019-11 Security Monthly Quality Rollup for Windows Server 2012 R2 for x64-based Systems (KB4525243)
PATCH-277642019-11 Security Only Quality Update for Windows Server 2012 R2 for x64-based Systems (KB4525250)
PATCH-277652019-11 Security Only Quality Update for Windows 8.1 for x86-based Systems (KB4525250)
PATCH-277662019-11 Security Only Quality Update for Windows 8.1 for x64-based Systems (KB4525250)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234