CVE-2020-0744
Description
An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowing an attacker to retrieve information from a targeted system, aka Windows GDI Information Disclosure Vulnerability.
Risk Information
Base Score
5.4
MODERATE
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
EPSS Score
Exploitation Probability
1.037
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Scripting Engine Memory Corruption Vulnerability for Windows 10 Version 1507 for x64-based Systems (KB4537776) | Windows |
| Scripting Engine Memory Corruption Vulnerability for Windows 10 Version 1507 for x86-based Systems (KB4537776) | Windows |
| Scripting Engine Memory Corruption Vulnerability for Windows 10 Version 1607 for x86-based Systems (KB4537764) | Windows |
| Scripting Engine Memory Corruption Vulnerability for Windows Server 2016 for x64-based Systems (KB4537764) | Windows |
| Scripting Engine Memory Corruption Vulnerability for Windows 10 Version 1607 for x64-based Systems (KB4537764) | Windows |
| Scripting Engine Memory Corruption Vulnerability for Windows 10 Version 1903 for x86-based Systems (KB4532693) | Windows |
| Scripting Engine Memory Corruption Vulnerability for Windows Server, version 1903 for x64-based Systems (KB4532693) | Windows |
| Scripting Engine Memory Corruption Vulnerability for Windows Server, version 1909 for x64-based Systems (KB4532693) | Windows |
| Scripting Engine Memory Corruption Vulnerability for Windows 10 Version 1909 for x64-based Systems (KB4532693) | Windows |
| Scripting Engine Memory Corruption Vulnerability for Windows 10 Version 1909 for x86-based Systems (KB4532693) | Windows |
| Scripting Engine Memory Corruption Vulnerability for Windows 10 Version 1903 for x64-based Systems (KB4532693) | Windows |
| Scripting Engine Memory Corruption Vulnerability for Windows Server 2012 for x64-based Systems (KB4537814) | Windows |
| Windows Search Indexer Elevation of Privilege Vulnerability for Windows Server 2012 for x64-based Systems (KB4537794) | Windows |
| Scripting Engine Memory Corruption Vulnerability for Windows 10 Version 1709 for x64-based Systems (KB4537789) | Windows |
| Scripting Engine Memory Corruption Vulnerability for Windows 10 Version 1709 for x86-based Systems (KB4537789) | Windows |
| Scripting Engine Memory Corruption Vulnerability for Windows 10 Version 1803 for x64-based Systems (KB4537762) | Windows |
| Scripting Engine Memory Corruption Vulnerability for Windows Server 2016 (1803) for x64-based Systems (KB4537762) | Windows |
| Scripting Engine Memory Corruption Vulnerability for Windows 10 Version 1803 for x86-based Systems (KB4537762) | Windows |
| Scripting Engine Memory Corruption Vulnerability for Windows 7 for x64-based Systems (KB4537820) | Windows |
| Scripting Engine Memory Corruption Vulnerability for Windows Server 2008 R2 for x64-based Systems (KB4537820) | Windows |
| Scripting Engine Memory Corruption Vulnerability for Windows 7 for x86-based Systems (KB4537820) | Windows |
| Windows Search Indexer Elevation of Privilege Vulnerability for Windows 7 for x64-based Systems (KB4537813) | Windows |
| Windows Search Indexer Elevation of Privilege Vulnerability for Windows Server 2008 R2 for x64-based Systems (KB4537813) | Windows |
| Windows Search Indexer Elevation of Privilege Vulnerability for Windows 7 for x86-based Systems (KB4537813) | Windows |
| Scripting Engine Memory Corruption Vulnerability for Windows Server 2008 for x86-based Systems (KB4537810) | Windows |
| Scripting Engine Memory Corruption Vulnerability for Windows Server 2008 for x64-based Systems (KB4537810) | Windows |
| Windows Search Indexer Elevation of Privilege Vulnerability for Windows Server 2008 for x64-based Systems (KB4537822) | Windows |
| Windows Search Indexer Elevation of Privilege Vulnerability for Windows Server 2008 for x86-based Systems (KB4537822) | Windows |
| Scripting Engine Memory Corruption Vulnerability for Windows 10 Version 1809 for x64-based Systems (KB4532691) | Windows |
| Scripting Engine Memory Corruption Vulnerability for Windows 10 Version 1809 for x86-based Systems (KB4532691) | Windows |
| Scripting Engine Memory Corruption Vulnerability for Windows Server 2019 for x64-based Systems (KB4532691) | Windows |
| Scripting Engine Memory Corruption Vulnerability for Windows 8.1 for x86-based Systems (KB4537821) | Windows |
| Scripting Engine Memory Corruption Vulnerability for Windows 8.1 for x64-based Systems (KB4537821) | Windows |
| Scripting Engine Memory Corruption Vulnerability for Windows Server 2012 R2 for x64-based Systems (KB4537821) | Windows |
| Windows Search Indexer Elevation of Privilege Vulnerability for Windows Server 2012 R2 for x64-based Systems (KB4537803) | Windows |
| Windows Search Indexer Elevation of Privilege Vulnerability for Windows 8.1 for x64-based Systems (KB4537803) | Windows |
| Windows Search Indexer Elevation of Privilege Vulnerability for Windows 8.1 for x86-based Systems (KB4537803) | Windows |
Patch Details
Click to see the patches provided by ManageEngine for this CVE
| Patch ID | Patch Description |
|---|---|
| PATCH-28326 | 2020-02 Cumulative Update for Windows 10 Version 1507 for x64-based Systems (KB4537776) |
| PATCH-28327 | 2020-02 Cumulative Update for Windows 10 Version 1507 for x86-based Systems (KB4537776) |
| PATCH-28328 | 2020-02 Cumulative Update for Windows 10 Version 1607 for x86-based Systems (KB4537764) |
| PATCH-28329 | 2020-02 Cumulative Update for Windows Server 2016 for x64-based Systems (KB4537764) |
| PATCH-28330 | 2020-02 Cumulative Update for Windows 10 Version 1607 for x64-based Systems (KB4537764) |
| PATCH-28320 | 2020-02 Cumulative Update for Windows 10 Version 1903 for x86-based Systems (KB4532693) |
| PATCH-28321 | 2020-02 Cumulative Update for Windows Server, version 1903 for x64-based Systems (KB4532693) |
| PATCH-28322 | 2020-02 Cumulative Update for Windows Server, version 1909 for x64-based Systems (KB4532693) |
| PATCH-28323 | 2020-02 Cumulative Update for Windows 10 Version 1909 for x64-based Systems (KB4532693) |
| PATCH-28324 | 2020-02 Cumulative Update for Windows 10 Version 1909 for x86-based Systems (KB4532693) |
| PATCH-28325 | 2020-02 Cumulative Update for Windows 10 Version 1903 for x64-based Systems (KB4532693) |
| PATCH-28339 | 2020-02 Security Monthly Quality Rollup for Windows Server 2012 for x64-based Systems (KB4537814) |
| PATCH-28360 | 2020-02 Security Only Quality Update for Windows Server 2012 for x64-based Systems (KB4537794) |
| PATCH-28318 | 2020-02 Cumulative Update for Windows 10 Version 1709 for x64-based Systems (KB4537789) |
| PATCH-28319 | 2020-02 Cumulative Update for Windows 10 Version 1709 for x86-based Systems (KB4537789) |
| PATCH-28312 | 2020-02 Cumulative Update for Windows 10 Version 1803 for x64-based Systems (KB4537762) |
| PATCH-28313 | 2020-02 Cumulative Update for Windows Server 2016 (1803) for x64-based Systems (KB4537762) |
| PATCH-28314 | 2020-02 Cumulative Update for Windows 10 Version 1803 for x86-based Systems (KB4537762) |
| PATCH-28331 | 2020-02 Security Monthly Quality Rollup for Windows 7 for x64-based Systems (KB4537820) (ESU) |
| PATCH-28332 | 2020-02 Security Monthly Quality Rollup for Windows Server 2008 R2 for x64-based Systems (KB4537820) (ESU) |
| PATCH-28333 | 2020-02 Security Monthly Quality Rollup for Windows 7 for x86-based Systems (KB4537820) (ESU) |
| PATCH-28352 | 2020-02 Security Only Quality Update for Windows 7 for x64-based Systems (KB4537813) (ESU) |
| PATCH-28353 | 2020-02 Security Only Quality Update for Windows Server 2008 R2 for x64-based Systems (KB4537813) (ESU) |
| PATCH-28354 | 2020-02 Security Only Quality Update for Windows 7 for x86-based Systems (KB4537813) (ESU) |
| PATCH-28337 | 2020-02 Security Monthly Quality Rollup for Windows Server 2008 for x86-based Systems (KB4537810) (ESU) |
| PATCH-28338 | 2020-02 Security Monthly Quality Rollup for Windows Server 2008 for x64-based Systems (KB4537810) (ESU) |
| PATCH-28358 | 2020-02 Security Only Quality Update for Windows Server 2008 for x64-based Systems (KB4537822) (ESU) |
| PATCH-28359 | 2020-02 Security Only Quality Update for Windows Server 2008 for x86-based Systems (KB4537822) (ESU) |
| PATCH-28315 | 2020-02 Cumulative Update for Windows 10 Version 1809 for x64-based Systems (KB4532691) |
| PATCH-28316 | 2020-02 Cumulative Update for Windows 10 Version 1809 for x86-based Systems (KB4532691) |
| PATCH-28317 | 2020-02 Cumulative Update for Windows Server 2019 for x64-based Systems (KB4532691) |
| PATCH-28334 | 2020-02 Security Monthly Quality Rollup for Windows 8.1 for x86-based Systems (KB4537821) |
| PATCH-28335 | 2020-02 Security Monthly Quality Rollup for Windows 8.1 for x64-based Systems (KB4537821) |
| PATCH-28336 | 2020-02 Security Monthly Quality Rollup for Windows Server 2012 R2 for x64-based Systems (KB4537821) |
| PATCH-28355 | 2020-02 Security Only Quality Update for Windows Server 2012 R2 for x64-based Systems (KB4537803) |
| PATCH-28356 | 2020-02 Security Only Quality Update for Windows 8.1 for x64-based Systems (KB4537803) |
| PATCH-28357 | 2020-02 Security Only Quality Update for Windows 8.1 for x86-based Systems (KB4537803) |
References
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234