Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2017-0061 — Sensitive Information Exposure in Corporation Color Management

CWE-200 — Sensitive Information Exposure10 documents5 sources
Severity
6.5MEDIUMNVD
NVD5.3
EPSS
18.5%
top 4.74%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
13
Microsoft Corporation Color ManagementMicrosoft Windows 10Microsoft Windows Server 2008+10 more
Timeline
PublishedMar 17
Latest updateMay 17

Description

The Color Management Module (ICM32.dll) memory handling functionality in Windows Vista SP2, Windows Server 2008 SP2 and R2, and Windows 7 SP1 allows remote attackers to bypass ASLR and execute code in combination with another vulnerability through a crafted website, aka "Microsoft Color Management Information Disclosure Vulnerability." This vulnerability is different from that described in CVE-2017-0063.

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:NExploitability: 1.6 | Impact: 3.6

Affected Packages12 packages

▶CVEListV5microsoft_corporation/color_managementThe Color Management Module (ICM32.dll) memory handling functionality in Windows Vista SP2; Windows Server 2008 SP2 and R2; and Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016

Patches

Patch: portal.msrc.microsoft.com ↗Patch: portal.msrc.microsoft.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-ghj3-wcfw-j5vr: The Color Management Module (ICM32↗2022-05-17
▶
GHSA
GHSA-vf7c-cc99-62w4: The Color Management Module (ICM32↗2022-05-17
▶

💥Exploits & PoCs

1
Exploit-DB
Microsoft Color Management Module 'icm32.dll' - 'icm32!Fill_ushort_ELUTs_from_lut16Tag' Out-of-Bounds Read (MS17-013)↗2017-03-20
▶

📋Vendor Advisories

1
Microsoft
Microsoft Color Management Information Disclosure Vulnerability↗2017-03-14
▶

💬Community

4
Bugzilla
CVE-2017-7846 Mozilla: JavaScript Execution via RSS in mailbox:// origin↗2018-01-02
▶
Bugzilla
CVE-2017-7829 Mozilla: From address with encoded null character is cut off in message header display↗2018-01-02
▶
Bugzilla
CVE-2017-7848 Mozilla: RSS Feed vulnerable to new line Injection↗2018-01-02
▶
Bugzilla
CVE-2017-7847 Mozilla: Local path string can be leaked from RSS feed↗2018-01-02
▶