CVE-2017-0061

2017-03-1700:00:00

microsoft

www.cve.org

AI Score

5.4

Confidence

High

EPSS

0.141

Percentile

95.8%

JSON

The Color Management Module (ICM32.dll) memory handling functionality in Windows Vista SP2, Windows Server 2008 SP2 and R2, and Windows 7 SP1 allows remote attackers to bypass ASLR and execute code in combination with another vulnerability through a crafted website, aka “Microsoft Color Management Information Disclosure Vulnerability.” This vulnerability is different from that described in CVE-2017-0063.

CNA Affected

[
  {
    "product": "Color Management",
    "vendor": "Microsoft Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "The Color Management Module (ICM32.dll) memory handling functionality in Windows Vista SP2, Windows Server 2008 SP2 and R2, and Windows 7 SP1"
      }
    ]
  }
]