admin/nvd-json-data-feeds
1
0
Fork 0
mirror of https://github.com/fkie-cad/nvd-json-data-feeds.git synced 2025-07-09 16:05:11 +00:00
Code Issues Packages Projects Releases Wiki Activity
nvd-json-data-feeds/CVE-2019/CVE-2019-06xx/CVE-2019-0676.json

300 lines
10 KiB
JSON
Raw Normal View History

bootstrap
2023-04-24 12:24:31 +02:00
{
"id": "CVE-2019-0676",
"sourceIdentifier": "secure@microsoft.com",
"published": "2019-03-05T23:29:02.613",
Auto-Update: 2025-04-10T16:00:20.364795+00:00
2025-04-10 16:03:53 +00:00
"lastModified": "2025-04-10T14:23:24.717",
"vulnStatus": "Analyzed",
Auto-Update: 2024-12-08T03:00:18.988682+00:00
2024-12-08 03:06:42 +00:00
"cveTags": [],
bootstrap
2023-04-24 12:24:31 +02:00
"descriptions": [
{
"lang": "en",
"value": "An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory.An attacker who successfully exploited this vulnerability could test for the presence of files on disk, aka 'Internet Explorer Information Disclosure Vulnerability'."
},
{
"lang": "es",
"value": "Existe una vulnerabilidad de divulgaci\u00f3n de informaci\u00f3n cuando Internet Explorer gestiona inadecuadamente los objetos en la memoria. Un atacante que explote con \u00e9xito esta vulnerabilidad podr\u00eda averiguar si existen archivos en el disco. Esto tambi\u00e9n se conoce como \"Internet Explorer Information Disclosure Vulnerability'."
}
],
"metrics": {
Auto-Update: 2025-02-07T19:00:24.983152+00:00
2025-02-07 19:03:51 +00:00
"cvssMetricV31": [
{
Auto-Update: 2025-04-10T16:00:20.364795+00:00
2025-04-10 16:03:53 +00:00
"source": "nvd@nist.gov",
"type": "Primary",
Auto-Update: 2025-02-07T19:00:24.983152+00:00
2025-02-07 19:03:51 +00:00
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 3.6
Auto-Update: 2025-04-10T16:00:20.364795+00:00
2025-04-10 16:03:53 +00:00
},
bootstrap
2023-04-24 12:24:31 +02:00
{
Auto-Update: 2025-04-10T16:00:20.364795+00:00
2025-04-10 16:03:53 +00:00
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
bootstrap
2023-04-24 12:24:31 +02:00
"cvssData": {
Auto-Update: 2025-04-10T16:00:20.364795+00:00
2025-04-10 16:03:53 +00:00
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
Auto-Update: 2024-11-23T11:07:34.152052+00:00
2024-11-23 11:10:51 +00:00
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
bootstrap
2023-04-24 12:24:31 +02:00
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
Auto-Update: 2024-11-23T11:07:34.152052+00:00
2024-11-23 11:10:51 +00:00
"availabilityImpact": "NONE"
bootstrap
2023-04-24 12:24:31 +02:00
},
"exploitabilityScore": 2.8,
"impactScore": 3.6
}
],
"cvssMetricV2": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
Auto-Update: 2024-11-23T11:07:34.152052+00:00
2024-11-23 11:10:51 +00:00
"baseScore": 4.3,
bootstrap
2023-04-24 12:24:31 +02:00
"accessVector": "NETWORK",
"accessComplexity": "MEDIUM",
"authentication": "NONE",
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
Auto-Update: 2024-11-23T11:07:34.152052+00:00
2024-11-23 11:10:51 +00:00
"availabilityImpact": "NONE"
bootstrap
2023-04-24 12:24:31 +02:00
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 8.6,
"impactScore": 2.9,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": true
}
]
},
Auto-Update: 2024-11-23T11:07:34.152052+00:00
2024-11-23 11:10:51 +00:00
"cisaExploitAdd": "2022-05-23",
"cisaActionDue": "2022-06-13",
"cisaRequiredAction": "Apply updates per vendor instructions.",
"cisaVulnerabilityName": "Microsoft Internet Explorer Information Disclosure Vulnerability",
bootstrap
2023-04-24 12:24:31 +02:00
"weaknesses": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*",
"matchCriteriaId": "D5808661-A082-4CBE-808C-B253972487B4"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:*",
"matchCriteriaId": "D7809F78-8D56-4925-A8F9-4119B973A667"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
Auto-Update: 2025-04-10T16:00:20.364795+00:00
2025-04-10 16:03:53 +00:00
"criteria": "cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:x64:*",
"matchCriteriaId": "A045AC0A-471E-444C-B3B0-4CABC23E8CFB"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:x86:*",
"matchCriteriaId": "28A7FEE9-B473-48A0-B0ED-A5CC1E44194C"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*",
"matchCriteriaId": "5E491E46-1917-41FE-8F9A-BB0BDDEB42C3"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*",
"matchCriteriaId": "0A1BC97A-263E-4291-8AEF-02EE4E6031E9"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:o:microsoft:windows_10_1703:-:*:*:*:*:*:x64:*",
"matchCriteriaId": "B98DB3FF-CC3B-4E9F-A9CC-EC4C89AF3B31"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:o:microsoft:windows_10_1703:-:*:*:*:*:*:x86:*",
"matchCriteriaId": "8733BF37-7BF2-409D-9452-DA8A92DA1124"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:o:microsoft:windows_10_1709:-:*:*:*:*:*:arm64:*",
"matchCriteriaId": "555C22C7-356D-4DA7-8CED-DA7423BBC6CF"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:o:microsoft:windows_10_1709:-:*:*:*:*:*:x64:*",
"matchCriteriaId": "469F95D3-ABBB-4F1A-A000-BE0F6BD60FF6"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:o:microsoft:windows_10_1709:-:*:*:*:*:*:x86:*",
"matchCriteriaId": "D76003FB-EE99-4D8E-B6A0-B13C2041E5A0"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:arm64:*",
"matchCriteriaId": "40151476-C0FD-4336-8194-039E8827B7C8"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:x64:*",
"matchCriteriaId": "D82F8AF7-ED01-4649-849E-F248F0E02384"
bootstrap
2023-04-24 12:24:31 +02:00
},
{
"vulnerable": false,
Auto-Update: 2025-04-10T16:00:20.364795+00:00
2025-04-10 16:03:53 +00:00
"criteria": "cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:x86:*",
"matchCriteriaId": "C1CFB53B-B17B-47BD-BAC1-C6C5D168FFB6"
bootstrap
2023-04-24 12:24:31 +02:00
},
{
"vulnerable": false,
Auto-Update: 2025-04-10T16:00:20.364795+00:00
2025-04-10 16:03:53 +00:00
"criteria": "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:*",
"matchCriteriaId": "73D24713-D897-408D-893B-77A61982597D"
bootstrap
2023-04-24 12:24:31 +02:00
},
{
"vulnerable": false,
Auto-Update: 2025-04-10T16:00:20.364795+00:00
2025-04-10 16:03:53 +00:00
"criteria": "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*",
"matchCriteriaId": "306B7CE6-8239-4AED-9ED4-4C9F5B349F58"
bootstrap
2023-04-24 12:24:31 +02:00
},
{
"vulnerable": false,
Auto-Update: 2025-04-10T16:00:20.364795+00:00
2025-04-10 16:03:53 +00:00
"criteria": "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*",
"matchCriteriaId": "345FCD64-D37B-425B-B64C-8B1640B7E850"
bootstrap
2023-04-24 12:24:31 +02:00
},
{
"vulnerable": false,
"criteria": "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
"matchCriteriaId": "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
},
{
"vulnerable": false,
Auto-Update: 2025-04-10T16:00:20.364795+00:00
2025-04-10 16:03:53 +00:00
"criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
"matchCriteriaId": "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
bootstrap
2023-04-24 12:24:31 +02:00
},
{
"vulnerable": false,
"criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
"matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
"matchCriteriaId": "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
"matchCriteriaId": "DB79EE26-FC32-417D-A49C-A1A63165A968"
}
]
}
]
}
],
"references": [
{
"url": "http://www.securityfocus.com/bid/106886",
"source": "secure@microsoft.com",
"tags": [
Auto-Update: 2025-04-10T16:00:20.364795+00:00
2025-04-10 16:03:53 +00:00
"Broken Link",
bootstrap
2023-04-24 12:24:31 +02:00
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0676",
"source": "secure@microsoft.com",
"tags": [
"Patch",
"Vendor Advisory"
]
Auto-Update: 2024-11-23T11:07:34.152052+00:00
2024-11-23 11:10:51 +00:00
},
{
"url": "http://www.securityfocus.com/bid/106886",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
Auto-Update: 2025-04-10T16:00:20.364795+00:00
2025-04-10 16:03:53 +00:00
"Broken Link",
Auto-Update: 2024-11-23T11:07:34.152052+00:00
2024-11-23 11:10:51 +00:00
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0676",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Vendor Advisory"
]
bootstrap
2023-04-24 12:24:31 +02:00
}
]
}
Reference in New Issue Copy Permalink