Signature Detail

HTTP: Microsoft Windows CVE-2019-0903 Remote Code Execution.

This signature detects attempts to exploit a known vulnerability in the Microsoft Windows. A successful attack can lead to Remote Code Execution.

Extended Description

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'.

Affected Products

• Microsoft windows_10 -
• Microsoft windows_10 1607
• Microsoft windows_10 1703
• Microsoft windows_10 1709
• Microsoft windows_10 1803
• Microsoft windows_10 1809
• Microsoft windows_10 1903
• Microsoft windows_7 -
• Microsoft windows_8.1 -
• Microsoft windows_rt_8.1 -
• Microsoft windows_server_2008 -
• Microsoft windows_server_2008 r2
• Microsoft windows_server_2012 -
• Microsoft windows_server_2012 r2
• Microsoft windows_server_2016 -
• Microsoft windows_server_2016 1803
• Microsoft windows_server_2016 1903
• Microsoft windows_server_2019 -

References

• CVE: CVE-2019-0903