CVE-2017-0061

The Color Management Module (ICM32.dll) memory handling functionality in Windows Vista SP2, Windows Server 2008 SP2 and R2, and Windows 7 SP1 allows remote…

published March 17, 2017

CVSS

—

EPSS

43%

Percentile

98.7

In the wild

Unconfirmed

What it is

The Color Management Module (ICM32.dll) memory handling functionality in Windows Vista SP2, Windows Server 2008 SP2 and R2, and Windows 7 SP1 allows remote attackers to bypass ASLR and execute code in combination with another vulnerability through a crafted website, aka "Microsoft Color Management Information Disclosure Vulnerability." This vulnerability is different from that described in CVE-2017-0063.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.43130 · 98.7th percentile
Published: 2017-03-17T00:00Z

EPSS history

Timeline

17 MAR 00:00Z
The Color Management Module (ICM32.dll) memory handling functionality in Windows Vista SP2, Windows Server 2008 SP2 and R2, and Windows 7 SP1 allows remote…
cvelistv5