{
  "affected": [],
  "aliases": [
    "CVE-2019-1178"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2019-08-14T21:15:00Z",
    "severity": "HIGH"
  },
  "details": "An elevation of privilege vulnerability exists in the way that the ssdpsrv.dll handles objects in memory, aka \u0027Windows Elevation of Privilege Vulnerability\u0027. This CVE ID is unique from CVE-2019-1173, CVE-2019-1174, CVE-2019-1175, CVE-2019-1177, CVE-2019-1179, CVE-2019-1180, CVE-2019-1184, CVE-2019-1186.",
  "id": "GHSA-vfjm-94qj-mfgw",
  "modified": "2024-06-03T18:53:35Z",
  "published": "2022-05-24T16:53:31Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-1178"
    },
    {
      "type": "WEB",
      "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1178"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Windows Server 2012",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 pour syst\u00e8mes x64",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 1809 pour syst\u00e8mes x64",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 1903 pour syst\u00e8mes x64",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2019 (Server Core installation)",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2019",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2012 R2",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2008 R2 pour syst\u00e8mes Itanium Service Pack 1",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 1803 pour syst\u00e8mes 32 bits",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 1607 pour syst\u00e8mes 32 bits",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 1803 pour syst\u00e8mes x64",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2008 pour syst\u00e8mes x64 Service Pack 2",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Defender",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 1809 pour syst\u00e8mes 32 bits",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server, version 1803 (Server Core Installation)",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 1709 pour syst\u00e8mes 32 bits",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2016 (Server Core installation)",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 1903 pour syst\u00e8mes 32 bits",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows RT 8.1",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 7 pour syst\u00e8mes x64 Service Pack 1",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 1809 pour ARM64-based Systems",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 1709 pour ARM64-based Systems",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2008 pour syst\u00e8mes x64 Service Pack 2 (Server Core installation)",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2008 pour syst\u00e8mes 32 bits Service Pack 2 (Server Core installation)",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 1607 pour syst\u00e8mes x64",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 1703 pour syst\u00e8mes x64",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2012 (Server Core installation)",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 1803 pour ARM64-based Systems",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2008 pour syst\u00e8mes 32 bits Service Pack 2",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2008 R2 pour syst\u00e8mes x64 Service Pack 1",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 8.1 pour syst\u00e8mes x64",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 1703 pour syst\u00e8mes 32 bits",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2016",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2008 pour syst\u00e8mes Itanium Service Pack 2",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 1903 pour ARM64-based Systems",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 8.1 pour syst\u00e8mes 32 bits",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2008 R2 pour syst\u00e8mes x64 Service Pack 1 (Server Core installation)",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2012 R2 (Server Core installation)",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 pour syst\u00e8mes 32 bits",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 7 pour syst\u00e8mes 32 bits Service Pack 1",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 1709 pour 64-based Systems",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server, version 1903 (Server Core installation)",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2019-1125",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1125"
    },
    {
      "name": "CVE-2019-1153",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1153"
    },
    {
      "name": "CVE-2019-1227",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1227"
    },
    {
      "name": "CVE-2019-1182",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1182"
    },
    {
      "name": "CVE-2019-1169",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1169"
    },
    {
      "name": "CVE-2019-0723",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-0723"
    },
    {
      "name": "CVE-2019-1206",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1206"
    },
    {
      "name": "CVE-2019-1150",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1150"
    },
    {
      "name": "CVE-2019-1057",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1057"
    },
    {
      "name": "CVE-2019-1161",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1161"
    },
    {
      "name": "CVE-2019-1152",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1152"
    },
    {
      "name": "CVE-2019-1173",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1173"
    },
    {
      "name": "CVE-2019-1178",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1178"
    },
    {
      "name": "CVE-2019-1212",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1212"
    },
    {
      "name": "CVE-2019-1170",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1170"
    },
    {
      "name": "CVE-2019-9514",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-9514"
    },
    {
      "name": "CVE-2019-1222",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1222"
    },
    {
      "name": "CVE-2019-1145",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1145"
    },
    {
      "name": "CVE-2019-1078",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1078"
    },
    {
      "name": "CVE-2019-1190",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1190"
    },
    {
      "name": "CVE-2019-1143",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1143"
    },
    {
      "name": "CVE-2019-1155",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1155"
    },
    {
      "name": "CVE-2019-1164",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1164"
    },
    {
      "name": "CVE-2019-1198",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1198"
    },
    {
      "name": "CVE-2019-1179",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1179"
    },
    {
      "name": "CVE-2019-0718",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-0718"
    },
    {
      "name": "CVE-2019-1174",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1174"
    },
    {
      "name": "CVE-2019-1147",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1147"
    },
    {
      "name": "CVE-2019-1185",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1185"
    },
    {
      "name": "CVE-2019-1172",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1172"
    },
    {
      "name": "CVE-2019-1151",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1151"
    },
    {
      "name": "CVE-2019-0714",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-0714"
    },
    {
      "name": "CVE-2019-9511",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-9511"
    },
    {
      "name": "CVE-2019-1171",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1171"
    },
    {
      "name": "CVE-2019-1224",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1224"
    },
    {
      "name": "CVE-2019-1162",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1162"
    },
    {
      "name": "CVE-2019-1154",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1154"
    },
    {
      "name": "CVE-2019-1157",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1157"
    },
    {
      "name": "CVE-2019-1228",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1228"
    },
    {
      "name": "CVE-2019-0736",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-0736"
    },
    {
      "name": "CVE-2019-1226",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1226"
    },
    {
      "name": "CVE-2019-1223",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1223"
    },
    {
      "name": "CVE-2019-1163",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1163"
    },
    {
      "name": "CVE-2019-1176",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1176"
    },
    {
      "name": "CVE-2019-1183",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1183"
    },
    {
      "name": "CVE-2019-1175",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1175"
    },
    {
      "name": "CVE-2019-1149",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1149"
    },
    {
      "name": "CVE-2019-0720",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-0720"
    },
    {
      "name": "CVE-2019-1180",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1180"
    },
    {
      "name": "CVE-2019-0716",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-0716"
    },
    {
      "name": "CVE-2019-1159",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1159"
    },
    {
      "name": "CVE-2019-1225",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1225"
    },
    {
      "name": "CVE-2019-1181",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1181"
    },
    {
      "name": "CVE-2019-1144",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1144"
    },
    {
      "name": "CVE-2019-1187",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1187"
    },
    {
      "name": "CVE-2019-0715",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-0715"
    },
    {
      "name": "CVE-2019-1158",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1158"
    },
    {
      "name": "CVE-2019-0717",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-0717"
    },
    {
      "name": "CVE-2019-1146",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1146"
    },
    {
      "name": "CVE-2019-1188",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1188"
    },
    {
      "name": "CVE-2019-9518",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-9518"
    },
    {
      "name": "CVE-2019-1213",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1213"
    },
    {
      "name": "CVE-2019-1156",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1156"
    },
    {
      "name": "CVE-2019-0965",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-0965"
    },
    {
      "name": "CVE-2019-1177",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1177"
    },
    {
      "name": "CVE-2019-1148",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1148"
    },
    {
      "name": "CVE-2019-1186",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1186"
    },
    {
      "name": "CVE-2019-1184",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1184"
    },
    {
      "name": "CVE-2019-9512",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-9512"
    },
    {
      "name": "CVE-2019-9506",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-9506"
    },
    {
      "name": "CVE-2019-1168",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1168"
    },
    {
      "name": "CVE-2019-9513",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-9513"
    }
  ],
  "links": [],
  "reference": "CERTFR-2019-AVI-397",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2019-08-14T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Contournement de la fonctionnalit\u00e9 de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eMicrosoft Windows\u003c/span\u003e. Elles permettent \u00e0 un attaquant\nde provoquer une ex\u00e9cution de code \u00e0 distance, une \u00e9l\u00e9vation de\nprivil\u00e8ges, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es, un d\u00e9ni de\nservice et un contournement de la fonctionnalit\u00e9 de s\u00e9curit\u00e9.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Microsoft Windows",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft du 13 ao\u00fbt 2019",
      "url": "https://portal.msrc.microsoft.com/fr-FR/security-guidance"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Windows Server 2012",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 pour syst\u00e8mes x64",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 1809 pour syst\u00e8mes x64",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 1903 pour syst\u00e8mes x64",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2019 (Server Core installation)",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2019",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2012 R2",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2008 R2 pour syst\u00e8mes Itanium Service Pack 1",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 1803 pour syst\u00e8mes 32 bits",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 1607 pour syst\u00e8mes 32 bits",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 1803 pour syst\u00e8mes x64",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2008 pour syst\u00e8mes x64 Service Pack 2",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Defender",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 1809 pour syst\u00e8mes 32 bits",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server, version 1803 (Server Core Installation)",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 1709 pour syst\u00e8mes 32 bits",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2016 (Server Core installation)",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 1903 pour syst\u00e8mes 32 bits",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows RT 8.1",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 7 pour syst\u00e8mes x64 Service Pack 1",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 1809 pour ARM64-based Systems",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 1709 pour ARM64-based Systems",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2008 pour syst\u00e8mes x64 Service Pack 2 (Server Core installation)",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2008 pour syst\u00e8mes 32 bits Service Pack 2 (Server Core installation)",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 1607 pour syst\u00e8mes x64",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 1703 pour syst\u00e8mes x64",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2012 (Server Core installation)",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 1803 pour ARM64-based Systems",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2008 pour syst\u00e8mes 32 bits Service Pack 2",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2008 R2 pour syst\u00e8mes x64 Service Pack 1",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 8.1 pour syst\u00e8mes x64",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 1703 pour syst\u00e8mes 32 bits",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2016",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2008 pour syst\u00e8mes Itanium Service Pack 2",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 1903 pour ARM64-based Systems",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 8.1 pour syst\u00e8mes 32 bits",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2008 R2 pour syst\u00e8mes x64 Service Pack 1 (Server Core installation)",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2012 R2 (Server Core installation)",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 pour syst\u00e8mes 32 bits",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 7 pour syst\u00e8mes 32 bits Service Pack 1",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 1709 pour 64-based Systems",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server, version 1903 (Server Core installation)",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2019-1125",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1125"
    },
    {
      "name": "CVE-2019-1153",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1153"
    },
    {
      "name": "CVE-2019-1227",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1227"
    },
    {
      "name": "CVE-2019-1182",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1182"
    },
    {
      "name": "CVE-2019-1169",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1169"
    },
    {
      "name": "CVE-2019-0723",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-0723"
    },
    {
      "name": "CVE-2019-1206",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1206"
    },
    {
      "name": "CVE-2019-1150",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1150"
    },
    {
      "name": "CVE-2019-1057",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1057"
    },
    {
      "name": "CVE-2019-1161",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1161"
    },
    {
      "name": "CVE-2019-1152",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1152"
    },
    {
      "name": "CVE-2019-1173",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1173"
    },
    {
      "name": "CVE-2019-1178",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1178"
    },
    {
      "name": "CVE-2019-1212",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1212"
    },
    {
      "name": "CVE-2019-1170",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1170"
    },
    {
      "name": "CVE-2019-9514",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-9514"
    },
    {
      "name": "CVE-2019-1222",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1222"
    },
    {
      "name": "CVE-2019-1145",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1145"
    },
    {
      "name": "CVE-2019-1078",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1078"
    },
    {
      "name": "CVE-2019-1190",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1190"
    },
    {
      "name": "CVE-2019-1143",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1143"
    },
    {
      "name": "CVE-2019-1155",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1155"
    },
    {
      "name": "CVE-2019-1164",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1164"
    },
    {
      "name": "CVE-2019-1198",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1198"
    },
    {
      "name": "CVE-2019-1179",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1179"
    },
    {
      "name": "CVE-2019-0718",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-0718"
    },
    {
      "name": "CVE-2019-1174",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1174"
    },
    {
      "name": "CVE-2019-1147",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1147"
    },
    {
      "name": "CVE-2019-1185",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1185"
    },
    {
      "name": "CVE-2019-1172",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1172"
    },
    {
      "name": "CVE-2019-1151",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1151"
    },
    {
      "name": "CVE-2019-0714",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-0714"
    },
    {
      "name": "CVE-2019-9511",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-9511"
    },
    {
      "name": "CVE-2019-1171",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1171"
    },
    {
      "name": "CVE-2019-1224",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1224"
    },
    {
      "name": "CVE-2019-1162",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1162"
    },
    {
      "name": "CVE-2019-1154",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1154"
    },
    {
      "name": "CVE-2019-1157",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1157"
    },
    {
      "name": "CVE-2019-1228",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1228"
    },
    {
      "name": "CVE-2019-0736",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-0736"
    },
    {
      "name": "CVE-2019-1226",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1226"
    },
    {
      "name": "CVE-2019-1223",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1223"
    },
    {
      "name": "CVE-2019-1163",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1163"
    },
    {
      "name": "CVE-2019-1176",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1176"
    },
    {
      "name": "CVE-2019-1183",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1183"
    },
    {
      "name": "CVE-2019-1175",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1175"
    },
    {
      "name": "CVE-2019-1149",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1149"
    },
    {
      "name": "CVE-2019-0720",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-0720"
    },
    {
      "name": "CVE-2019-1180",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1180"
    },
    {
      "name": "CVE-2019-0716",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-0716"
    },
    {
      "name": "CVE-2019-1159",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1159"
    },
    {
      "name": "CVE-2019-1225",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1225"
    },
    {
      "name": "CVE-2019-1181",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1181"
    },
    {
      "name": "CVE-2019-1144",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1144"
    },
    {
      "name": "CVE-2019-1187",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1187"
    },
    {
      "name": "CVE-2019-0715",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-0715"
    },
    {
      "name": "CVE-2019-1158",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1158"
    },
    {
      "name": "CVE-2019-0717",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-0717"
    },
    {
      "name": "CVE-2019-1146",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1146"
    },
    {
      "name": "CVE-2019-1188",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1188"
    },
    {
      "name": "CVE-2019-9518",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-9518"
    },
    {
      "name": "CVE-2019-1213",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1213"
    },
    {
      "name": "CVE-2019-1156",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1156"
    },
    {
      "name": "CVE-2019-0965",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-0965"
    },
    {
      "name": "CVE-2019-1177",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1177"
    },
    {
      "name": "CVE-2019-1148",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1148"
    },
    {
      "name": "CVE-2019-1186",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1186"
    },
    {
      "name": "CVE-2019-1184",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1184"
    },
    {
      "name": "CVE-2019-9512",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-9512"
    },
    {
      "name": "CVE-2019-9506",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-9506"
    },
    {
      "name": "CVE-2019-1168",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1168"
    },
    {
      "name": "CVE-2019-9513",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-9513"
    }
  ],
  "links": [],
  "reference": "CERTFR-2019-AVI-397",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2019-08-14T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Contournement de la fonctionnalit\u00e9 de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eMicrosoft Windows\u003c/span\u003e. Elles permettent \u00e0 un attaquant\nde provoquer une ex\u00e9cution de code \u00e0 distance, une \u00e9l\u00e9vation de\nprivil\u00e8ges, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es, un d\u00e9ni de\nservice et un contournement de la fonctionnalit\u00e9 de s\u00e9curit\u00e9.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Microsoft Windows",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft du 13 ao\u00fbt 2019",
      "url": "https://portal.msrc.microsoft.com/fr-FR/security-guidance"
    }
  ]
}

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "21540673-614A-4D40-8BD7-3F07723803B0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
              "matchCriteriaId": "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
              "matchCriteriaId": "AEE2E768-0F45-46E1-B6D7-087917109D98",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
              "matchCriteriaId": "83B14968-3985-43C3-ACE5-8307196EFAE3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
              "matchCriteriaId": "7CB85C75-4D35-480E-843D-60579EC75FCB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
              "matchCriteriaId": "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*",
              "matchCriteriaId": "3FB5CDAE-C713-4D9D-9D6A-2C2E8924A4BB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
              "matchCriteriaId": "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "C6CE5198-C498-4672-AF4C-77AB4BE06C5C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
              "matchCriteriaId": "5F422A8C-2C4E-42C8-B420-E0728037E15C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
              "matchCriteriaId": "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
              "matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*",
              "matchCriteriaId": "CAACE735-003E-4ACB-A82E-C0CF97D7F013",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*",
              "matchCriteriaId": "5B921FDB-8E7D-427E-82BE-4432585080CF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "DB79EE26-FC32-417D-A49C-A1A63165A968",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "An elevation of privilege vulnerability exists in the way that the ssdpsrv.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.\nTo exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.\nThe security update addresses the vulnerability by ensuring the ssdpsrv.dll properly handles objects in memory.\n"
    },
    {
      "lang": "es",
      "value": "Existe una vulnerabilidad de elevaci\u00f3n de privilegios en la manera en que la biblioteca ssdpsrv.dll maneja los objetos en la memoria, tambi\u00e9n se conoce como \"Windows Elevation of Privilege Vulnerability\". El ID de este CVE es diferente de CVE-2019-1173, CVE-2019-1174, CVE-2019-1175, CVE-2019-1177, CVE-2019-1179, CVE-2019-1180, CVE-2019-1184, CVE- 2019-1186."
    }
  ],
  "id": "CVE-2019-1178",
  "lastModified": "2024-11-21T04:36:11.163",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "LOCAL",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 4.6,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "HIGH",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 7.0,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.0,
        "impactScore": 5.9,
        "source": "secure@microsoft.com",
        "type": "Secondary"
      }
    ]
  },
  "published": "2019-08-14T21:15:16.533",
  "references": [
    {
      "source": "secure@microsoft.com",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1178"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1178"
    }
  ],
  "sourceIdentifier": "secure@microsoft.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

{
  "GSD": {
    "alias": "CVE-2019-1178",
    "description": "An elevation of privilege vulnerability exists in the way that the ssdpsrv.dll handles objects in memory, aka \u0027Windows Elevation of Privilege Vulnerability\u0027. This CVE ID is unique from CVE-2019-1173, CVE-2019-1174, CVE-2019-1175, CVE-2019-1177, CVE-2019-1179, CVE-2019-1180, CVE-2019-1184, CVE-2019-1186.",
    "id": "GSD-2019-1178"
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2019-1178"
      ],
      "details": "An elevation of privilege vulnerability exists in the way that the ssdpsrv.dll handles objects in memory, aka \u0027Windows Elevation of Privilege Vulnerability\u0027. This CVE ID is unique from CVE-2019-1173, CVE-2019-1174, CVE-2019-1175, CVE-2019-1177, CVE-2019-1179, CVE-2019-1180, CVE-2019-1184, CVE-2019-1186.",
      "id": "GSD-2019-1178",
      "modified": "2023-12-13T01:23:51.922966Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "secure@microsoft.com",
        "ID": "CVE-2019-1178",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "Windows",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "7 for 32-bit Systems Service Pack 1"
                        },
                        {
                          "version_value": "7 for x64-based Systems Service Pack 1"
                        },
                        {
                          "version_value": "8.1 for 32-bit systems"
                        },
                        {
                          "version_value": "8.1 for x64-based systems"
                        },
                        {
                          "version_value": "RT 8.1"
                        },
                        {
                          "version_value": "10 for 32-bit Systems"
                        },
                        {
                          "version_value": "10 for x64-based Systems"
                        },
                        {
                          "version_value": "10 Version 1607 for 32-bit Systems"
                        },
                        {
                          "version_value": "10 Version 1607 for x64-based Systems"
                        },
                        {
                          "version_value": "10 Version 1703 for 32-bit Systems"
                        },
                        {
                          "version_value": "10 Version 1703 for x64-based Systems"
                        },
                        {
                          "version_value": "10 Version 1709 for 32-bit Systems"
                        },
                        {
                          "version_value": "10 Version 1709 for x64-based Systems"
                        },
                        {
                          "version_value": "10 Version 1803 for 32-bit Systems"
                        },
                        {
                          "version_value": "10 Version 1803 for x64-based Systems"
                        },
                        {
                          "version_value": "10 Version 1803 for ARM64-based Systems"
                        },
                        {
                          "version_value": "10 Version 1809 for 32-bit Systems"
                        },
                        {
                          "version_value": "10 Version 1809 for x64-based Systems"
                        },
                        {
                          "version_value": "10 Version 1809 for ARM64-based Systems"
                        },
                        {
                          "version_value": "10 Version 1709 for ARM64-based Systems"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Windows Server",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "2008 R2 for x64-based Systems Service Pack 1 (Core installation)"
                        },
                        {
                          "version_value": "2008 R2 for Itanium-Based Systems Service Pack 1"
                        },
                        {
                          "version_value": "2008 R2 for x64-based Systems Service Pack 1"
                        },
                        {
                          "version_value": "2008 for 32-bit Systems Service Pack 2 (Core installation)"
                        },
                        {
                          "version_value": "2012"
                        },
                        {
                          "version_value": "2012 (Core installation)"
                        },
                        {
                          "version_value": "2012 R2"
                        },
                        {
                          "version_value": "2012 R2 (Core installation)"
                        },
                        {
                          "version_value": "2016"
                        },
                        {
                          "version_value": "2016  (Core installation)"
                        },
                        {
                          "version_value": "version 1803  (Core Installation)"
                        },
                        {
                          "version_value": "2019"
                        },
                        {
                          "version_value": "2019  (Core installation)"
                        },
                        {
                          "version_value": "2008 for Itanium-Based Systems Service Pack 2"
                        },
                        {
                          "version_value": "2008 for 32-bit Systems Service Pack 2"
                        },
                        {
                          "version_value": "2008 for x64-based Systems Service Pack 2"
                        },
                        {
                          "version_value": "2008 for x64-based Systems Service Pack 2 (Core installation)"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Windows 10 Version 1903 for 32-bit Systems",
                    "version": {
                      "version_data": [
                        {
                          "version_value": ""
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Windows 10 Version 1903 for x64-based Systems",
                    "version": {
                      "version_data": [
                        {
                          "version_value": ""
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Windows 10 Version 1903 for ARM64-based Systems",
                    "version": {
                      "version_data": [
                        {
                          "version_value": ""
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Windows Server, version 1903 (Server Core installation)",
                    "version": {
                      "version_data": [
                        {
                          "version_value": ""
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "Microsoft"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "An elevation of privilege vulnerability exists in the way that the ssdpsrv.dll handles objects in memory, aka \u0027Windows Elevation of Privilege Vulnerability\u0027. This CVE ID is unique from CVE-2019-1173, CVE-2019-1174, CVE-2019-1175, CVE-2019-1177, CVE-2019-1179, CVE-2019-1180, CVE-2019-1184, CVE-2019-1186."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "Elevation of Privilege"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1178",
            "refsource": "MISC",
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1178"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@microsoft.com",
          "ID": "CVE-2019-1178"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "An elevation of privilege vulnerability exists in the way that the ssdpsrv.dll handles objects in memory, aka \u0027Windows Elevation of Privilege Vulnerability\u0027. This CVE ID is unique from CVE-2019-1173, CVE-2019-1174, CVE-2019-1175, CVE-2019-1177, CVE-2019-1179, CVE-2019-1180, CVE-2019-1184, CVE-2019-1186."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "NVD-CWE-noinfo"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1178",
              "refsource": "MISC",
              "tags": [
                "Patch",
                "Vendor Advisory"
              ],
              "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1178"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "acInsufInfo": false,
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 4.6,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 6.4,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": false
        },
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "exploitabilityScore": 1.8,
          "impactScore": 5.9
        }
      },
      "lastModifiedDate": "2020-08-24T17:37Z",
      "publishedDate": "2019-08-14T21:15Z"
    }
  }
}