CVE-2015-2364

CWE-2643 documents3 sources
Severity
7.2HIGH
EPSS
1.0%
top 23.18%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Microsoft Windows 2003 ServerMicrosoft Windows Server 2008Microsoft Windows Server 2012
Timeline
PublishedJul 14
Latest updateMay 14

Description

The graphics component in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted application that leverages an incorrect bitmap conversion, aka "Graphics Component EOP Vulnerability."

CVSS vector

AV:L/AC:L/C:C/I:C/A:CExploitability: 3.9 | Impact: 10.0

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-7j67-gxf2-xxpq: The graphics component in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows↗2022-05-14
▶
CVEList
CVE-2015-2364: The graphics component in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows↗2015-07-14
▶
CVE-2015-2364 (HIGH CVSS 7.2) | The graphics component in Microsoft | cvebase.io