PT-2017-9786

Name of the Vulnerable Software and Affected Versions Huawei Mate 8 phones with software NXT-AL10C00B197 and earlier versions Huawei Mate 8 phones with software NXT-DL10C00B197 and earlier versions Huawei Mate 8 phones with software NXT-TL10C00B197 and earlier versions Huawei Mate 8 phones with...

CVE-2016-8756: Improper Input Validation

ION memory management module in Huawei Mate 8 phones with software NXT-AL10C00B197 and earlier versions, NXT-DL10C00B197 and earlier versions, NXT-TL10C00B197 and earlier versions, NXT-CL10C00B197 and earlier versions allows attackers to cause a denial of service restart...

The vulnerability of the Windows operating system, which allows a perpetrator to trigger a service failure or otherwise affect the system.

The vulnerability of the Color Management Module ICM32.dll in the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to cause service failures or otherwise affect the system through the accessed web page...

The vulnerability of the Windows operating system, which allows a perpetrator to trigger a service failure or otherwise affect the system.

The vulnerability of the Color Management Module ICM32.dll in the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to cause service failures or otherwise affect the system through a specially crafted website...

Microsoft Color Management Module icm32.dll - icm32!LHCalc3toX_Di16_Do16_Lut8_G32 Out-of-Bounds Read (MS17-013)

Microsoft Color Management Module icm32.dll - icm32!LHCalc3toXDi16Do16Lut8G32 Out-of-Bounds Read MS17-013 Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1054 We have encountered a crash in the Windows Color Management library icm32.dll, in the icm32!LHCalc3toXDi16Do16Lut8G32...

Microsoft Color Management Module 'icm32.dll' - 'icm32!LHCalc3toX_Di16_Do16_Lut8_G32' Out-of-Bounds Read (MS17-013)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1054 We have encountered a crash in the Windows Color Management library icm32.dll, in the icm32!LHCalc3toXDi16Do16Lut8G32 function, while trying to translate colors based on a malformed color profile file: --- 61e4.8620: Access...

CVE-2017-0063

The Color Management Module ICM32.dll memory handling functionality in Windows Vista SP2; Windows Server 2008 SP2 and R2; and Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to bypass ASL...

CVE-2017-0063

CVE-2017-0063 concerns the Color Management Module (ICM32.dll) in Windows, where memory handling in ICM32.dll across multiple Windows versions (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8.1, 2012/RT 8.1, 10 versions, 2016 Server) can be leveraged by a crafted website to bypass ASLR and execute code w...

CVE-2017-0063: Exposure of Sensitive Information to an Unauthorized Actor

The Color Management Module ICM32.dll memory handling functionality in Windows Vista SP2; Windows Server 2008 SP2 and R2; and Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to bypass ASL...

CVE-2017-0061

The Color Management Module ICM32.dll memory handling functionality in Windows Vista SP2, Windows Server 2008 SP2 and R2, and Windows 7 SP1 allows remote attackers to bypass ASLR and execute code in combination with another vulnerability through a crafted website, aka "Microsoft Color Management...

CVE-2017-0061

CVE-2017-0061 concerns the Color Management Module (ICM32.dll) memory handling in Windows Vista SP2, Windows Server 2008 SP2/R2, and Windows 7 SP1. The vulnerability allows remote attackers to bypass ASLR and, in conjunction with another vulnerability, execute code via a crafted website. Affected...

Microsoft Graphics Component Multiple Vulnerabilities (4013075)

This host is missing a critical security update according to Microsoft Bulletin MS17-013. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

PT-2017-1597

Name of the Vulnerable Software and Affected Versions Windows Vista SP2 Windows Server 2008 SP2 and R2 Windows 7 SP1 Description The issue is related to the Color Management Module ICM32.dll in Windows, which lacks protection of internal data. This can be exploited by a remote attacker through a...

Cross site scripting

Document Object Model-DOM based cross-site scripting vulnerability in the Advanced Management Module AMM versions earlier than 66Z of Lenovo IBM BladeCenter HS22, HS22V, HS23, HS23E, HX5 allows an unauthenticated attacker with access to the AMM's IP address to send a crafted URL that could inject...

PT-2017-9547

Name of the Vulnerable Software and Affected Versions Lenovo IBM BladeCenter Advanced Management Module AMM versions earlier than 66Z Description A cross-site scripting issue exists in the Advanced Management Module AMM that allows an unauthenticated attacker with access to the AMM's IP address t...

IBM BladeCenter Advanced Management Module Cross-Site Scripting Vulnerability

IBM BladeCenter Advanced Management Module AMM is a suite of advanced management modules from IBM in the United States for enabling BladeCenter system-level blade server management. A cross-site scripting vulnerability exists in IBM BladeCenter AMM versions prior to 3.66z. A remote attacker could...

CVE-2016-8232: Improper Neutralization of Input During Web Page Generation

Document Object Model-DOM based cross-site scripting vulnerability in the Advanced Management Module AMM versions earlier than 66Z of Lenovo IBM BladeCenter HS22, HS22V, HS23, HS23E, HX5 allows an unauthenticated attacker with access to the AMM's IP address to send a crafted URL that could inject...

Denial of Service Vulnerability in Multiple F5 BIG-IP Products (CNVD-2017-01192)

F5 BIG-IP is the popular load balancer. An unspecified security vulnerability exists in F5 BIG-IP, where submitting a special request can cause TMM to restart when TCP FAST OPEN is enabled...

CVE-2016-6898

XML external entity XXE vulnerability in the Hyper Management Module HMM in Huawei E9000 rack servers with software before V100R001C00SPC296 allows remote authenticated users to read arbitrary files or cause a denial of service web service outage via a crafted XML document...

CVE-2016-6898: Improper Access Control

XML external entity XXE vulnerability in the Hyper Management Module HMM in Huawei E9000 rack servers with software before V100R001C00SPC296 allows remote authenticated users to read arbitrary files or cause a denial of service web service outage via a crafted XML document...