Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qq8w-fhxq-rfwv

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

An information disclosure vulnerability exists when the Windows Image Acquisition (WIA) Service improperly discloses contents of its memory, aka 'Windows Image Acquisition Service Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1485.

An information disclosure vulnerability exists when the Windows Image Acquisition (WIA) Service improperly discloses contents of its memory, aka 'Windows Image Acquisition Service Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1485.

EPSS

Процентиль: 78%
0.01199
Низкий

7.8 High

CVSS3

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 7.8
nvd
почти 5 лет назад

An information disclosure vulnerability exists when the Windows Image Acquisition (WIA) Service improperly discloses contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit the vulnerability, an authenticated attacker could connect an imaging device (camera, scanner, cellular phone) to an affected system and run a specially crafted application to disclose information. The security update addresses the vulnerability by correcting how the WIA Service handles objects in memory.

CVSS3: 5.5
msrc
почти 5 лет назад

Windows Image Acquisition Service Information Disclosure Vulnerability

CVSS3: 5.5
fstec
почти 5 лет назад

Уязвимость службы Windows Image Acquisition (WIA) операционных систем Windows, позволяющая нарушителю раскрыть защищаемую информацию

EPSS

Процентиль: 78%
0.01199
Низкий

7.8 High

CVSS3

Дефекты

CWE-200