Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2018-8397

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka "GDI+ Remote Code Execution Vulnerabilit

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
microsoft

Description

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka "GDI+ Remote Code Execution Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Microsoft Windows Server 2008

  • 32-bit Systems Service Pack 2affected
  • 32-bit Systems Service Pack 2 (Server Core installation)affected
  • Itanium-Based Systems Service Pack 2affected
  • x64-based Systems Service Pack 2affected
  • x64-based Systems Service Pack 2 (Server Core installation)affected

Microsoft Windows 7

  • 32-bit Systems Service Pack 1affected
  • x64-based Systems Service Pack 1affected

Microsoft Windows Server 2008 R2

  • Itanium-Based Systems Service Pack 1affected
  • x64-based Systems Service Pack 1affected
  • x64-based Systems Service Pack 1 (Server Core installation)affected

References