Windows Image Acquisition Service Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Windows Image Acquisition (WIA) Service improperly discloses contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit the vulnerability, an authenticated attacker could connect an imaging device (camera, scanner, cellular phone) to an affected system and run a specially crafted application to disclose information. The security update addresses the vulnerability by correcting how the WIA Service handles objects in memory.

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

N/A

Microsoft Windows Image Acquisition Service 信息泄露漏洞

Microsoft Windows是美国微软（Microsoft）公司的一套个人设备使用的操作系统。 Microsoft Windows Image Acquisition Service中存在信息泄露漏洞。攻击者可通过将图像设备连接到受影响系统并运行特制的应用程序利用该漏洞获取信息，从而进一步入侵用户系统。以下产品及版本受到影响：Windows 10，Windows 10 1607版本，Windows 10 1709版本，Windows 10 1803版本，Windows 10 1809版本，Windo

N/A

N/A