CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-0903

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.344

EPSS Ranking 96.8%

CVSS Severity

CVSS v3 Score 8.8

CVSS v2 Score 9.3

Proposed Action

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory. An attacker who successfully exploited this vulnerability could take control of the affected system.

Ransomware Campaign

Unknown

References

Products affected by CVE-2019-0903

Microsoft » Windows 10 1507 » Version: N/A

cpe:2.3:o:microsoft:windows_10_1507:-
Microsoft » Windows 10 1607 » Version: N/A

cpe:2.3:o:microsoft:windows_10_1607:-
Microsoft » Windows 10 1703 » Version: N/A

cpe:2.3:o:microsoft:windows_10_1703:-
Microsoft » Windows 10 1709 » Version: N/A

cpe:2.3:o:microsoft:windows_10_1709:-
Microsoft » Windows 10 1803 » Version: N/A

cpe:2.3:o:microsoft:windows_10_1803:-
Microsoft » Windows 10 1809 » Version: N/A

cpe:2.3:o:microsoft:windows_10_1809:-
Microsoft » Windows 10 1903 » Version: N/A

cpe:2.3:o:microsoft:windows_10_1903:-
Microsoft » Windows 7 » Version: N/A

cpe:2.3:o:microsoft:windows_7:-
Microsoft » Windows 8.1 » Version: N/A

cpe:2.3:o:microsoft:windows_8.1:-
Microsoft » Windows Rt 8.1 » Version: N/A

cpe:2.3:o:microsoft:windows_rt_8.1:-
Microsoft » Windows Server 1803 » Version: N/A

cpe:2.3:o:microsoft:windows_server_1803:-
Microsoft » Windows Server 1903 » Version: N/A

cpe:2.3:o:microsoft:windows_server_1903:-
Microsoft » Windows Server 2008 » Version: N/A

cpe:2.3:o:microsoft:windows_server_2008:-
Microsoft » Windows Server 2008 » Version: r2

cpe:2.3:o:microsoft:windows_server_2008:r2
Microsoft » Windows Server 2012 » Version: N/A

cpe:2.3:o:microsoft:windows_server_2012:-
Microsoft » Windows Server 2012 » Version: r2

cpe:2.3:o:microsoft:windows_server_2012:r2
Microsoft » Windows Server 2016 » Version: N/A

cpe:2.3:o:microsoft:windows_server_2016:-
Microsoft » Windows Server 2019 » Version: N/A

cpe:2.3:o:microsoft:windows_server_2019:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-0903

Products

Pricing

Contact Us