PatchaPalooza

CVE-2021-1665: GDI+ Remote Code Execution Vulnerability

CVE-2021-1665 is a remote code execution vulnerability in GDI+, rated Critical by Microsoft, with a CVSS 3.1 base score of 7.8 (High). An attacker can exploit it by an attacker with local access, without any privileges and only if a user takes an action. Microsoft has not reported exploitation in the wild and rates exploitation as less likely. The EPSS model estimates a 4.06% probability of exploitation activity in the next 30 days, higher than 91% of all scored vulnerabilities. Microsoft released the fix on 12 January 2021 in the January 2021 Patch Tuesday, delivered through 14 security updates (KB4598242, KB4598245, KB4598230, KB4598229 and more). It affects 40 products in 2 product families (Windows, ESU).

Key facts

CVE ID
CVE-2021-1665
Severity
High CVSS 7.8
Microsoft severity
Critical
Impact
Remote Code Execution
Exploited in the wild
No
Publicly disclosed
No
Exploitation likelihood
Less Likely
EPSS
4.06% (percentile 91%)
CISA KEV
Not listed
Released
Last updated
Patch Tuesday
January 2021 Patch Tuesday
Product families
Windows, ESU

CVSS score and vector

Microsoft scores CVE-2021-1665 at 7.8 (temporal 6.8) using CVSS 3.1. Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

MetricValue
Attack vectorLocal
Attack complexityLow
Privileges requiredNone
User interactionRequired
ScopeUnchanged
Confidentiality impactHigh
Integrity impactHigh
Availability impactHigh
Exploit code maturityUnproven
Remediation levelOfficial fix
Report confidenceConfirmed

Affected products (40)

Windows

ProductSecurity updateTypeFixed buildRestart
Windows 10 Version 20H2 for 32-bit SystemsKB4598242Security UpdateYes
Windows 10 Version 20H2 for ARM64-based SystemsKB4598242Security UpdateYes
Windows Server, version 20H2 (Server Core Installation)KB4598242Security UpdateYes
Windows 10 Version 1803 for 32-bit SystemsKB4598245Security UpdateYes
Windows 10 Version 1803 for x64-based SystemsKB4598245Security UpdateYes
Windows 10 Version 1803 for ARM64-based SystemsKB4598245Security UpdateYes
Windows 10 Version 1809 for 32-bit SystemsKB4598230Security UpdateYes
Windows 10 Version 1809 for x64-based SystemsKB4598230Security UpdateYes
Windows 10 Version 1809 for ARM64-based SystemsKB4598230Security UpdateYes
Windows Server 2019KB4598230Security UpdateYes
Windows Server 2019 (Server Core installation)KB4598230Security UpdateYes
Windows 10 Version 1909 for 32-bit SystemsKB4598229Security UpdateYes
Windows 10 Version 1909 for x64-based SystemsKB4598229Security UpdateYes
Windows 10 Version 1909 for ARM64-based SystemsKB4598229Security UpdateYes
Windows Server, version 1909 (Server Core installation)KB4598229Security UpdateYes
Windows 10 Version 2004 for 32-bit SystemsKB4598242Security UpdateYes
Windows 10 Version 2004 for ARM64-based SystemsKB4598242Security UpdateYes
Windows 10 Version 2004 for x64-based SystemsKB4598242Security UpdateYes
Windows Server, version 2004 (Server Core installation)KB4598242Security UpdateYes
Windows 10 for 32-bit SystemsKB4598231Security UpdateYes
Windows 10 for x64-based SystemsKB4598231Security UpdateYes
Windows 10 Version 1607 for 32-bit SystemsKB4598243Security UpdateYes
Windows 10 Version 1607 for x64-based SystemsKB4598243Security UpdateYes
Windows Server 2016KB4598243Security UpdateYes
Windows Server 2016 (Server Core installation)KB4598243Security UpdateYes
Windows 8.1 for 32-bit systemsKB4598285
KB4598275		Monthly Rollup
Security Only
Yes
Yes
Windows 8.1 for x64-based systemsKB4598285
KB4598275		Monthly Rollup
Security Only
Yes
Yes
Windows RT 8.1KB4598285Monthly RollupYes

ESU

ProductSecurity updateTypeFixed buildRestart
Windows 7 for 32-bit Systems Service Pack 1KB4598279
KB4598289		Monthly Rollup
Security Only
Yes
Yes
Windows 7 for x64-based Systems Service Pack 1KB4598279
KB4598289		Monthly Rollup
Security Only
Yes
Yes
Windows Server 2008 for 32-bit Systems Service Pack 2KB4598288
KB4598287		Monthly Rollup
Security Only
Yes
Yes
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)KB4598288
KB4598287		Monthly Rollup
Security Only
Yes
Yes
Windows Server 2008 for x64-based Systems Service Pack 2KB4598288
KB4598287		Monthly Rollup
Security Only
Yes
Yes
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)KB4598288
KB4598287		Monthly Rollup
Security Only
Yes
Yes
Windows Server 2008 R2 for x64-based Systems Service Pack 1KB4598279
KB4598289		Monthly Rollup
Security Only
Yes
Yes
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)KB4598279
KB4598289		Monthly Rollup
Security Only
Yes
Yes
Windows Server 2012KB4598278
KB4598297		Monthly Rollup
Security Only
Yes
Yes
Windows Server 2012 (Server Core installation)KB4598278
KB4598297		Monthly Rollup
Security Only
Yes
Yes
Windows Server 2012 R2KB4598285
KB4598275		Monthly Rollup
Security Only
Yes
Yes
Windows Server 2012 R2 (Server Core installation)KB4598285
KB4598275		Monthly Rollup
Security Only
Yes
Yes

Security updates (14)

NIST NVD data

NVD status
Modified
NVD CVSS
7.8 (HIGH)
Published to NVD
NVD last modified

Affected configurations (CPE)

ProductVulnerable versions
windows 10all listed versions
windows 10 20h2all listed versions
windows 10 1607all listed versions
windows 10 1803all listed versions
windows 10 1809all listed versions
windows 10 1909all listed versions
windows 10 2004all listed versions
windows 7all listed versions
windows 8.1all listed versions
windows rt 8.1all listed versions
windows server 2008all listed versions
windows server 2008 r2 (x64)all listed versions
windows server 2012all listed versions
windows server 2012 r2all listed versions
windows server 2016all listed versions
windows server 2016 20h2all listed versions
windows server 2016 1909all listed versions
windows server 2016 2004all listed versions
windows server 2019all listed versions

References

Acknowledgments

Revision history

VersionDateDescription
1.0Information published.

Sources