CVE-2017-0063

The Color Management Module (ICM32.dll) memory handling functionality in Windows Vista SP2; Windows Server 2008 SP2 and R2; and Windows 7 SP1; Windows 8.1…

published March 17, 2017

CVSS
—
EPSS
35%
Percentile
98.4
In the wild
Unconfirmed
What it is

The Color Management Module (ICM32.dll) memory handling functionality in Windows Vista SP2; Windows Server 2008 SP2 and R2; and Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to bypass ASLR and execute code in combination with another vulnerability through a crafted website, aka "Microsoft Color Management Information Disclosure Vulnerability." This vulnerability is different from that described in CVE-2017-0061.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.35280 · 98.4th percentile
Published
2017-03-17T00:00Z
EPSS history
Timeline
  • 17 MAR 00:00Z
    The Color Management Module (ICM32.dll) memory handling functionality in Windows Vista SP2; Windows Server 2008 SP2 and R2; and Windows 7 SP1; Windows 8.1…
    cvelistv5