An information disclosure vulnerability exists in Windows when the Windows Imaging Component fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user's system.
Medium - information disclosure
Medium - An attacker needs to convince a user to visit an untrusted webpage
CVE-2020-1397
Uninitialized memory is used in pixel data calculation when a crafted TIFF image file is rendered by Windows Imaging Component.
This issue was fixed as part of July 2020 security update.
Dhanesh Kizhakkinan
- 03 March 2020 - Issue reported to vendor
- 04 March 2020 - Issue confirmed
- 14 July 2020 - Issue fixed and security advisory released