0day/00-CVE_EXP/CVE-2019-0803
2022-03-01 16:58:42 +08:00
..
2022-03-01 16:58:42 +08:00
2022-03-01 16:58:42 +08:00
2022-03-01 16:58:42 +08:00
2022-03-01 16:58:42 +08:00
2022-03-01 16:58:42 +08:00

CVE-2019-0803

Describe

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'.

ImpactVersion

Product CPU Architecture Version Update Tested
Windows 10 x86/x64
Windows 10 x86/x64 1607
Windows 10 x86/x64 1703
Windows 10 x86/x64/ARM64 1709
Windows 10 x86/x64/ARM64 1803
Windows 10 x86/x64/ARM64 1809
Windows 7 x86/x64 SP1
Windows 8.1 x86/x64
Windows Rt 8.1
Windows Server 2008 x86/x64 SP2
Windows Server 2008 x86/x64 R2 SP1
Windows Server 2012
Windows Server 2012 R2
Windows Server 2016
Windows Server 2019
Windows Server 1709
Windows Server 1803

Patch

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0803

Utilization

CompilerEnvironment

  • VS2019V142X64 Debug

Here the test machine is Windows Server 2008 R2 X64, on the GIF map

11

Analyze