CVE-2019-1179

CVE Modified - Description

09:18 PM

- An elevation of privilege vulnerability exists in the way that the unistore.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application. The security update addresses the vulnerability by ensuring the unistore.dll properly handles objects in memory.

+ An elevation of privilege vulnerability exists in the way that the unistore.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application. The security update addresses the vulnerability by ensuring the unistore.dll properly handles objects in memory.

CVE Modified - Reference

04:36 AM

- -

+ https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1179

CVE Modified - CVSS V3.1

05:16 PM

- -

+ Microsoft Corporation AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CVE Modified - CVSS V3

05:16 PM

- NIST AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

+ -

CVE Modified - Description

05:16 PM

- An elevation of privilege vulnerability exists in the way that the unistore.dll handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1173, CVE-2019-1174, CVE-2019-1175, CVE-2019-1177, CVE-2019-1178, CVE-2019-1180, CVE-2019-1184, CVE-2019-1186.

+ An elevation of privilege vulnerability exists in the way that the unistore.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application. The security update addresses the vulnerability by ensuring the unistore.dll properly handles objects in memory.

CWE Remap - CWE

05:37 PM

- CWE-264

+ NVD-CWE-noinfo

Initial Analysis - CPE Configuration

03:53 PM

- -

+ OR *cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:* *cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:* *cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:* *cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:* *cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:* *cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:* *cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:* *cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:* *cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:* *cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:* *cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*

Initial Analysis - CWE

03:53 PM

- -

+ CWE-264

Initial Analysis - Reference Type

03:53 PM

- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1179 No Types Assigned

+ https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1179 Patch, Vendor Advisory

Initial Analysis - CVSS V3

03:53 PM

- -

+ AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Initial Analysis - CVSS V2

03:53 PM

- -

+ (AV:L/AC:L/Au:N/C:P/I:P/A:P)