HTTP: Microsoft DirectWrite Multiple Remote Code Execution
This signature detects attempts to exploit a known vulnerability against Microsoft DirectWrite. A successful attack can lead to Remote Code Execution.
Extended Description
A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1117, CVE-2019-1118, CVE-2019-1119, CVE-2019-1121, CVE-2019-1122, CVE-2019-1123, CVE-2019-1124, CVE-2019-1127, CVE-2019-1128.
Affected Products
Microsoft windows_server_2019
References
CVE: CVE-2019-1122
URL: https://packetstormsecurity.com/files/153602/GS20190712113245.tgz https://packetstormsecurity.com/files/153601/GS20190712113101.tgz https://packetstormsecurity.com/files/153600/GS20190712112919.tgz https://packetstormsecurity.com/files/153605/GS20190712113431.tgz https://packetstormsecurity.com/files/153599/GS20190712112741.tgz https://packetstormsecurity.com/files/153578/GS20190710190410.tgz https://packetstormsecurity.com/files/153577/GS20190710190237.tgz https://packetstormsecurity.com/files/153575/GS20190710190015.tgz https://packetstormsecurity.com/files/153574/GS20190710185828.tgz https://packetstormsecurity.com/files/153573/GS20190710185637.tgz https://packetstormsecurity.com/files/153584/GS20190711003607.tgz https://packetstormsecurity.com/files/153586/GS20190711003825.tgz https://packetstormsecurity.com/files/153588/GS20190711004117.tgz https://packetstormsecurity.com/files/153587/GS20190711003938.tgz https://packetstormsecurity.com/files/153592/GS20190711004619.tgz https://packetstormsecurity.com/files/153583/GS20190711003446.tgz https://packetstormsecurity.com/files/153582/GS20190711003032.tgz https://packetstormsecurity.com/files/153585/GS20190711003711.tgz
Short Name
HTTP:MS-DW-MUL-RCE
Severity
Critical
Recommended
True
Recommended Action
Drop
Category
HTTP
Keywords
CVE-2019-1117 CVE-2019-1118 CVE-2019-1119 CVE-2019-1120 CVE-2019-1121 CVE-2019-1122 CVE-2019-1123 CVE-2019-1124 CVE-2019-1127 CVE-2019-1128 Code DirectWrite Execution Microsoft Multiple Remote
Release Date
10/22/2019
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3590
False Positive
Unknown
Vendors
Microsoft
CVSS Score
9.3