CVE Vulnerabilities

CVE-2019-1419

Published: Nov 12, 2019 | Modified: Nov 21, 2024
CVSS 3.x
8.8
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.x
6.8 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles specially crafted OpenType fonts, aka OpenType Font Parsing Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2019-1456.

Affected Software

NameVendorStart VersionEnd Version
Windows_10Microsoft- (including)- (including)
Windows_10Microsoft1607 (including)1607 (including)
Windows_10Microsoft1709 (including)1709 (including)
Windows_10Microsoft1803 (including)1803 (including)
Windows_10Microsoft1809 (including)1809 (including)
Windows_10Microsoft1903 (including)1903 (including)
Windows_7Microsoft–sp1 (including)–sp1 (including)
Windows_8.1Microsoft- (including)- (including)
Windows_rt_8.1Microsoft- (including)- (including)
Windows_server_2008Microsoft–sp2 (including)–sp2 (including)
Windows_server_2008Microsoftr2-sp1 (including)r2-sp1 (including)
Windows_server_2012Microsoft- (including)- (including)
Windows_server_2012Microsoftr2 (including)r2 (including)
Windows_server_2016Microsoft- (including)- (including)
Windows_server_2016Microsoft1803 (including)1803 (including)
Windows_server_2016Microsoft1903 (including)1903 (including)
Windows_server_2019Microsoft- (including)- (including)

References