Published: 17/03/2017 Updated: 16/08/2017

CVSS v2 Base Score: 2.6 | Impact Score: 2.9 | Exploitability Score: 4.9

CVSS v3 Base Score: 5.3 | Impact Score: 3.6 | Exploitability Score: 1.6

VMScore: 265

Vector: AV:N/AC:H/Au:N/C:P/I:N/A:N

The Color Management Module (ICM32.dll) memory handling functionality in Windows Vista SP2, Windows Server 2008 SP2 and R2, and Windows 7 SP1 allows remote malicious users to bypass ASLR and execute code in combination with another vulnerability through a crafted website, aka "Microsoft Color Management Information Disclosure Vulnerability." This vulnerability is different from that described in CVE-2017-0063.

Vulnerable Product	Search on Vulmon	Subscribe to Product
microsoft windows 7
microsoft windows server 2008
microsoft windows server 2008 r2
microsoft windows vista

Source: bugschromiumorg/p/project-zero/issues/detail?id=1052 We have encountered a crash in the Windows Color Management library (icm32dll), in the icm32!Fill_ushort_ELUTs_from_lut16Tag function, while trying to display a TIFF image with a malformed embedded color profile: --- (7c1c93b0): Access violation - code c0000005 (first chance ...

CWE-200 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0061 http://www.securityfocus.com/bid/96638 http://www.securitytracker.com/id/1038002 https://www.exploit-db.com/exploits/41657/https://nvd.nist.gov https://www.exploit-db.com/exploits/41657/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2017-0061

Vulnerability Summary

Vulnerability Trend

Exploits

References

Vulmon Search

About

Products

Connect