CVE-2019-0784

EUVD-2019-1540 · Published Apr 9, 2019

A remote code execution vulnerability exists in the way that the ActiveX Data objects (ADO) handles objects in memory, aka 'Windows ActiveX Remote Code Execution Vulnerability'.

Technologies

Microsoft Windows Server 2012Microsoft Windows 10Microsoft Windows Server 2019Microsoft Windows Rt 8.1Microsoft Windows 7Microsoft Windows 8.1Microsoft Windows Server 2008Microsoft Windows Server 2016

Weaknesses

CWE-787

CVSS scores

v3.07.5CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
v2.07.6AV:N/AC:H/Au:N/C:C/I:C/A:C

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access

T1190Exploit Public-Facing Application

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0784

Potentially impacted assets

See if this affects your attack surface