CVE-2018-0741

2018-01-0300:00:00

microsoft

www.cve.org

5.2 Medium

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.3%

JSON

The Color Management Module (Icm32.dll) in Windows 7 SP1 and Windows Server 2008 SP2 and R2 SP1 allows an information disclosure vulnerability due to the way objects are handled in memory, aka “Microsoft Color Management Information Disclosure Vulnerability”.

CNA Affected

[
  {
    "product": "Color Management Module (Icm32.dll)",
    "vendor": "Microsoft Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Windows 7 SP1 and Windows Server 2008 SP2 and R2 SP1"
      }
    ]
  }
]