CVE-2019-1241Microsoft Windows vulnerability

22 documents5 sources
Severity
7.8HIGHNVD
EPSS
29.4%
top 3.39%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedSep 11
Latest updateMay 24

Description

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1240, CVE-2019-1242, CVE-2019-1243, CVE-2019-1246, CVE-2019-1247, CVE-2019-1248, CVE-2019-1249, CVE-2019-1250.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages24 packages

Patches

🔴Vulnerability Details

9
GHSA
GHSA-xwxc-4fjj-x6vq: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remot2022-05-24
GHSA
GHSA-82x7-v42m-q6mv: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remot2022-05-24
GHSA
GHSA-5qqm-ghmq-h9vw: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remot2022-05-24
GHSA
GHSA-p43r-5w94-6hh4: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remot2022-05-24
GHSA
GHSA-3j7m-cfhc-782p: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remot2022-05-24

💥Exploits & PoCs

1
Exploit-DB
iScripts ReserveLogic - SQL Injection2019-04-03

📋Vendor Advisories

1
Microsoft
Jet Database Engine Remote Code Execution Vulnerability2019-09-10

🕵️Threat Intelligence

2
Unit42
Unit 42 Discovers 13 New Vulnerabilities Across Microsoft and Adobe Products2019-12-19
Unit42
Unit 42 Discovers 13 New Vulnerabilities Across Microsoft and Adobe Products2019-12-19
CVE-2019-1241 — Microsoft Windows vulnerability | cvebase