RULE(RULE ID:323752)

Rule General Information
Release Date: 2019-11-19
Rule Name: Microsoft Windows Imaging API Use After Free Vulnerability (CVE-2019-1311)
Severity:
CVE ID:
Rule Protection Details
Description: A remote code execution vulnerability exists when the Windows Imaging API improperly handles objects in memory, aka 'Windows Imaging API Remote Code Execution Vulnerability'.
Impact: A use-after-free vulnerability can be exploited by an attacker in the vulnerable product. Successful exploit may cause some adverse consequences, such as crash of the product, execution of arbitrary code.
Affected OS: Windows, Others
Reference: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1311
Solutions
The vendors have released upgrade patches to fix vulnerabilities, please visit:
https://portal.msrc.microsoft.com/zh-CN/security-guidance/advisory/CVE-2019-1311