Vulnerabilities > CVE-2020-1435 - Unspecified vulnerability in Microsoft products

CVSS 8.8 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

microsoft

NVD

Published: 2020-07-14

Updated: 2021-07-21

Summary

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'.

Vulnerable Configurations

Part	Description	Count
OS	Microsoft Microsoft Windows Server 2012 R2 Microsoft Windows Server 2012 - Microsoft Windows 10 1607 Microsoft Windows 10 - Microsoft Windows 10 1709 Microsoft Windows 10 1803 Microsoft Windows 10 1809 Microsoft Windows 10 1903 Microsoft Windows 10 1909 Microsoft Windows 10 2004 Microsoft Windows 8.1 - Microsoft Windows Server 2016 - Microsoft Windows Server 2016 1903 Microsoft Windows Server 2016 1909 Microsoft Windows Server 2016 2004 Microsoft Windows Server 2008 - Microsoft Windows Server 2008 R2 Microsoft Windows 7 - Microsoft Windows RT 8.1 - Microsoft Windows Server 2019 -	20

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1435