Skip to content
OpenAdvisories
Unscored CVE-2018-8397 EUVD-2018-20035GHSA-5jp7-chgf-4cwf

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka…

Published Aug 15, 2018 · Updated Aug 5, 2024 · Assigned by microsoft

Vendor: Microsoft Product: Windows 7 Product: Windows Server 2008 Product: Windows Server 2008 R2 Platform: Windows

Description

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka "GDI+ Remote Code Execution Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2.

Affected products

VendorProductAffectedFixed
Microsoft Windows Server 2008 32-bit Systems Service Pack 2, 32-bit Systems Service Pack 2 (Server Core installation), Itanium-Based Systems Service Pack 2, x64-based Systems Service Pack 2, x64-based Systems Service Pack 2 (Server Core installation) —
Microsoft Windows 7 32-bit Systems Service Pack 1, x64-based Systems Service Pack 1 —
Microsoft Windows Server 2008 R2 Itanium-Based Systems Service Pack 1, x64-based Systems Service Pack 1, x64-based Systems Service Pack 1 (Server Core installation) —

References