Out-of-bounds read in Microsoft Windows and Windows Server - CVE-2020-1348

Vulnerability details

The vulnerability allows a local attacker to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition within the Windows GDI component. A local attacker can trick a victim to open a specially crafted document or visit a malicious webpage, trigger out-of-bounds read error and read contents of memory on the system.

Affected software

How to mitigate CVE-2020-1348

External References

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1348

Related Security Bulletins

• Multiple privilege escalation vulnerabilities in Microsoft Windows printer driver