Microsoft Windows GDI+ Buffer Over-Read Vulnerability Leading to Denial-of-Service

A buffer over-read vulnerability has been identified in Windows GDI+ that allows an unauthorized attacker to cause a denial-of-service condition over the network. This vulnerability affects multiple Windows versions and stems from improper handling of buffer data, which can be exploited to disrupt service availability.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition, causing a significant disruption in service availability.

Remediation

Users can apply the security update KB5075999 to address this vulnerability. This update is available through the Microsoft Update Catalog. For Windows 10 Version 22H2, the update can be downloaded via the Monthly Rollup KB5075912. Windows Server 2022 users can also apply the Security Update KB5075906. For Windows 11, the Security Update KB5077181 is available for both x64 and ARM64-based systems. Windows Server 2019 users can apply the Security Update KB5075904.