HTTP: Microsoft DirectWrite Information Disclosure
This signature detects attempts to exploit a known vulnerability against Microsoft DirectWrite. A successful attack can lead to sensitive information disclosure.
Extended Description
An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1245, CVE-2019-1251.
Affected Products
Microsoft windows_server_2016
Short Name
HTTP:STC:EDGE:MS-DIRECTWRITE-OB
Severity
Minor
Recommended
True
Recommended Action
Drop
Category
HTTP
Keywords
CVE-2019-1244 CVE-2019-1245 DirectWrite Disclosure Information Microsoft
Release Date
11/15/2019
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3415
False Positive
Unknown
Vendors
Microsoft
CVSS Score
4.3