Remote code execution

A remote code execution vulnerability exists in the way that the Color Management Module ICM32.dll handles objects in memory, aka 'Microsoft Color Management Remote Code Execution Vulnerability'...

CVE-2020-1117

A remote code execution vulnerability exists in the way that the Color Management Module ICM32.dll handles objects in memory, aka 'Microsoft Color Management Remote Code Execution Vulnerability'...

Microsoft Color Management Remote Code Execution Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A remote code execution vulnerability exists in the handling of memory objects in the...

CVE-2018-0741

The Color Management Module Icm32.dll in Windows 7 SP1 and Windows Server 2008 SP2 and R2 SP1 allows an information disclosure vulnerability due to the way objects are handled in memory, aka "Microsoft Color Management Information Disclosure Vulnerability"...

CVE-2018-0741

The Color Management Module Icm32.dll in Windows 7 SP1 and Windows Server 2008 SP2 and R2 SP1 allows an information disclosure vulnerability due to the way objects are handled in memory, aka "Microsoft Color Management Information Disclosure Vulnerability"...

Windows 2008 January 3 2018 Multiple Security Updates

The remote Windows host is missing multiple security updates released on 2018/01/03. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerabilities exists in the way that the Color Management Module ICM32.dll handles objects in memory. This vulnerability allo...

Description of the security update for the Microsoft Color Management information disclosure vulnerability in Windows Server 2008: January 3, 2018

Description of the security update for the Microsoft Color Management information disclosure vulnerability in Windows Server 2008: January 3, 2018 Summary An information disclosure vulnerabilities exists in the way that the Color Management Module ICM32.dll handles objects in memory. This...

Microsoft Color Management Module (icm32.dll) out-of-bounds read （CVE-2017-0061）

We have encountered a crash in the Windows Color Management library icm32.dll, in the icm32!FillushortELUTsfromlut16Tag function, while trying to display a TIFF image with a malformed embedded color profile: 7c1c.93b0: Access violation - code c0000005 first chance First chance exceptions are...

Microsoft Color Management Module 'icm32.dll' - 'icm32!Fill_ushort_ELUTs_from_lut16Tag' Out-of-Bounds Read (MS17-013)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1052 We have encountered a crash in the Windows Color Management library icm32.dll, in the icm32!FillushortELUTsfromlut16Tag function, while trying to display a TIFF image with a malformed embedded color profile: --- 7c1c.93b0:...

Microsoft Color Management Module 'icm32.dll' - 'icm32!LHCalc3toX_Di16_Do16_Lut8_G32' Out-of-Bounds Read (MS17-013)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1054 We have encountered a crash in the Windows Color Management library icm32.dll, in the icm32!LHCalc3toXDi16Do16Lut8G32 function, while trying to translate colors based on a malformed color profile file: --- 61e4.8620: Access...

Microsoft Color Management Module icm32.dll - icm32!LHCalc3toX_Di16_Do16_Lut8_G32 Out-of-Bounds Read (MS17-013)

Microsoft Color Management Module icm32.dll - icm32!LHCalc3toXDi16Do16Lut8G32 Out-of-Bounds Read MS17-013 Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1054 We have encountered a crash in the Windows Color Management library icm32.dll, in the icm32!LHCalc3toXDi16Do16Lut8G32...

CVE-2017-0061

The Color Management Module ICM32.dll memory handling functionality in Windows Vista SP2, Windows Server 2008 SP2 and R2, and Windows 7 SP1 allows remote attackers to bypass ASLR and execute code in combination with another vulnerability through a crafted website, aka "Microsoft Color Management...

CVE-2017-0063

The Color Management Module ICM32.dll memory handling functionality in Windows Vista SP2; Windows Server 2008 SP2 and R2; and Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to bypass ASL...

Information disclosure

The Color Management Module ICM32.dll memory handling functionality in Windows Vista SP2; Windows Server 2008 SP2 and R2; and Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to bypass ASL...

Information disclosure

The Color Management Module ICM32.dll memory handling functionality in Windows Vista SP2, Windows Server 2008 SP2 and R2, and Windows 7 SP1 allows remote attackers to bypass ASLR and execute code in combination with another vulnerability through a crafted website, aka "Microsoft Color Management...

CVE-2017-0061

CVE-2017-0061 concerns the Color Management Module (ICM32.dll) memory handling in Windows Vista SP2, Windows Server 2008 SP2/R2, and Windows 7 SP1. The vulnerability allows remote attackers to bypass ASLR and, in conjunction with another vulnerability, execute code via a crafted website. Affected...

CVE-2017-0063

CVE-2017-0063 concerns the Color Management Module (ICM32.dll) in Windows, where memory handling in ICM32.dll across multiple Windows versions (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8.1, 2012/RT 8.1, 10 versions, 2016 Server) can be leveraged by a crafted website to bypass ASLR and execute code w...