CVE-2018-0741 — Sensitive Information Exposure in Corporation Color Management Module
5 documents4 sources
Severity
5.3MEDIUMNVD
EPSS
25.6%
top 3.75%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJan 4
Latest updateMay 13
Description
The Color Management Module (Icm32.dll) in Windows 7 SP1 and Windows Server 2008 SP2 and R2 SP1 allows an information disclosure vulnerability due to the way objects are handled in memory, aka "Microsoft Color Management Information Disclosure Vulnerability".
CVSS vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:NExploitability: 1.6 | Impact: 3.6
Affected Packages9 packages
▶CVEListV5microsoft_corporation/color_management_moduleWindows 7 SP1 and Windows Server 2008 SP2 and R2 SP1