The Color Management Module (ICM32.dll) memory handling functionality in Windows Vista SP2, Windows Server 2008 SP2 and R2, and Windows 7…
microsoft·CWE-200·Published 2017-03-17
The Color Management Module (ICM32.dll) memory handling functionality in Windows Vista SP2, Windows Server 2008 SP2 and R2, and Windows 7 SP1 allows remote attackers to bypass ASLR and execute code in combination with another vulnerability through a crafted website, aka "Microsoft Color Management Information Disclosure Vulnerability." This vulnerability is different from that described in CVE-2017-0063.
The Color Management Module (ICM32.dll) memory handling functionality in Windows Vista SP2, Windows Server 2008 SP2 and R2, and Windows 7 SP1 allows remote attackers to bypass ASLR and execute code in combination with another vulnerability through a crafted website, aka "Microsoft Color Management Information Disclosure Vulnerability." This vulnerability is different from that described in CVE-2017-0063.
La funcionalidad de manejo de memoria Color Management Module (ICM32.dll) en Windows Vista SP2, Windows Server 2008 SP2 y R2 y Windows 7 SP1 permite a atacantes remotos eludir ASLR y ejecutar código en combinación con otra vulnerabilidad a través de un sitio web manipulado, vulnerabilidad también conocida como "Microsoft Color Management Information Disclosure Vulnerability". Esta vulnerabilidad es diferente de la descrita en CVE-2017-0063.
| Version | Type | Source | Base | Exp | Impact | Vector |
|---|---|---|---|---|---|---|
| 2.0 | Primary | NVD | 2.6 | 4.9 | 2.9 | AV:N/AC:H/Au:N/C:P/I:N/A:N |
| 3.0 | Primary | NVD | 5.3 | 1.6 | 3.6 | CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N |