vendor:
Windows
by:
Unknown
8.8
CVSS
HIGH
Memory Corruption
119
CWE
Product Name: Windows
Affected Version From: Windows 7
Affected Version To: Windows 10
Patch Exists: YES
Related CWE: CVE-2019-0903
CPE: o:microsoft:windows
Platforms Tested: Windows
2019
Hole in Windows Classes
The xxRegisterWndClasses function in the code above registers multiple window classes without checking for errors. This can lead to a memory corruption vulnerability.
Mitigation:
The code should check the return value of the RegisterClassExA function and handle any errors accordingly. Additionally, the code should limit the number of window classes that can be registered to prevent excessive memory consumption.