CVE-2017-0063

🗓️ 17 Mar 2017 00:00:00Reported by microsoftType

cve🔗 web.nvd.nist.gov👁 97 Views🌐 WEB

Color Management Module (ICM32.dll) memory handling functionality vulnerability in multiple Windows version

Reporter	Title	Published	Views	Family All 21
0day.today	Microsoft Color Management Module icm32.dll - icm32!LHCalc3toX_Di16_Do16_Lut8_G32 Out-of-Bounds Read	20 Mar 201700:00	–	zdt
BDU FSTEC	The vulnerability of the Windows operating system, which allows a perpetrator to trigger a service failure or otherwise affect the system.	31 Mar 201700:00	–	bdu_fstec
Circl	CVE-2017-0063	20 Mar 201700:00	–	circl
CNVD	Microsoft Windows Color Management Information Disclosure Vulnerability (CNVD-2017-03766)	20 Mar 201700:00	–	cnvd
Cvelist	CVE-2017-0063	17 Mar 201700:00	–	cvelist
Microsoft KB	March 2017 Security Only Quality Update for Windows 8.1 and Windows Server 2012 R2	14 Mar 201707:00	–	mskb
Microsoft KB	MS17-013: Description of the security update for Microsoft Graphics Component: March 14, 2017	14 Mar 201707:00	–	mskb
Microsoft KB	March 14, 2017—KB4012606 (OS Build 10240.17319)	14 Mar 201707:00	–	mskb
Microsoft KB	MS17-013: Security Update for Microsoft Graphics Component: March 14, 2017	14 Mar 201700:00	–	mskb
Microsoft KB	March 14, 2017—KB4013198 (OS Build 10586.839)	14 Mar 201707:00	–	mskb

NVD

Node

microsoft windows_10Match-

microsoft windows_10Match1511

microsoft windows_10Match1607

microsoft windows_7sp1

microsoft windows_8.1

microsoft windows_rt_8.1

microsoft windows_server_2008sp2

microsoft windows_server_2008Matchr2sp1

microsoft windows_server_2012Match-

microsoft windows_server_2012Matchr2

microsoft windows_server_2016

microsoft windows_vistasp2

[
  {
    "product": "Color Management",
    "vendor": "Microsoft Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "The Color Management Module (ICM32.dll) memory handling functionality in Windows Vista SP2; Windows Server 2008 SP2 and R2; and Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016"
      }
    ]
  }
]

Source	Link
securitytracker	www.securitytracker.com/id/1038002
exploit-db	www.exploit-db.com/exploits/41659/
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0063
securityfocus	www.securityfocus.com/bid/96643

Parameter	Position	Path	Description	CWE
PoC zip file for vulnerability CVE-2017-0063	binary	github.com/offensive-security/exploit-database-bin-sploits/raw/master/sploits/41659.zip	Proof-of-concept exploit archive for Windows Color Management vulnerability (CVE-2017-0063) affecting icm32.dll; enables remote code execution via crafted content.	CWE-200

17 Jun 2026 00:57Current

5.4Medium risk

Vulners AI Score5.4

CVSS 24.3

CVSS 36.5

EPSS0.3528

CWE-200