Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2017-0061
HistoryMar 17, 2017 - 12:59 a.m.

CVE-2017-0061

2017-03-1700:59:00
CWE-200
[email protected]
web.nvd.nist.gov
48
cve-2017-0061
color management module
icm32.dll
windows
aslr
remote code execution
vulnerability

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

6 Medium

AI Score

Confidence

High

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

0.055 Low

EPSS

Percentile

93.2%

JSON

The Color Management Module (ICM32.dll) memory handling functionality in Windows Vista SP2, Windows Server 2008 SP2 and R2, and Windows 7 SP1 allows remote attackers to bypass ASLR and execute code in combination with another vulnerability through a crafted website, aka “Microsoft Color Management Information Disclosure Vulnerability.” This vulnerability is different from that described in CVE-2017-0063.

Related

prion 2
cvelist 2
cve 1
mskb 9
seebug 1
zdt 2
symantec 2
mscve 2
openvas 1
nessus 1
kaspersky 2
prion
prion
Information disclosure
2017-03-17 00:59:00
Information disclosure
2017-03-17 00:59:00
cvelist
cvelist
CVE-2017-0061
2017-03-17 00:00:00
CVE-2017-0063
2017-03-17 00:00:00
cve
cve
CVE-2017-0063
2017-03-17 00:59:00
mskb
mskb
MS17-013: Description of the security update for Microsoft Graphics Component: March 14, 2017
2017-03-14 07:00:00
MS17-013: Security Update for Microsoft Graphics Component: March 14, 2017
2017-03-14 00:00:00
March 2017 Security Only Quality Update for Windows 7 SP1 and Windows Server 2008 R2 SP1
2017-03-14 07:00:00
seebug
seebug
Microsoft Color Management Module (icm32.dll) out-of-bounds read （CVE-2017-0061）
2017-03-30 00:00:00
zdt
zdt
Microsoft Color Management Module icm32.dll - icm32!Fill_ushort_ELUTs_from_lut16Tag Out-of-Bounds Re
2017-03-20 00:00:00
Microsoft Color Management Module icm32.dll - icm32!LHCalc3toX_Di16_Do16_Lut8_G32 Out-of-Bounds Read
2017-03-20 00:00:00
symantec
symantec
Microsoft Windows Color Management CVE-2017-0061 Information Disclosure Vulnerability
2017-03-14 00:00:00
Microsoft Windows Color Management CVE-2017-0063 Information Disclosure Vulnerability
2017-03-14 00:00:00
mscve
mscve
CVE-2017-0061
2017-03-14 07:00:00
CVE-2017-0063
2017-03-14 07:00:00
openvas
openvas
Microsoft Graphics Component Multiple Vulnerabilities (4013075)
2017-03-15 00:00:00
nessus
nessus
MS17-013: Security Update for Microsoft Graphics Component (4013075)
2017-03-17 00:00:00
kaspersky
kaspersky
KLA11902 Multiple vulnerabilities in Microsoft Products (ESU)
2017-03-14 00:00:00
KLA10979 Multiple vulnerabilities in Microsoft Windows
2017-03-14 00:00:00

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

6 Medium

AI Score

Confidence

High

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

0.055 Low

EPSS

Percentile

93.2%

JSON
Related for CVE-2017-0061
prion2cvelist2cve1mskb9seebug1zdt2symantec2mscve2openvas1nessus1kaspersky2