CVE-2018-0741

Опубликовано: 04 янв. 2018

Источник: nvd

CVSS3: 5.3

CVSS2: 2.6

EPSS Средний

Описание

The Color Management Module (Icm32.dll) in Windows 7 SP1 and Windows Server 2008 SP2 and R2 SP1 allows an information disclosure vulnerability due to the way objects are handled in memory, aka "Microsoft Color Management Information Disclosure Vulnerability".

Ссылки

http://www.securityfocus.com/bid/102349
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1040093
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0741
Patch
Vendor Advisory
http://www.securityfocus.com/bid/102349
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1040093
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0741
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*

EPSS

Процентиль: 96%

0.22344

Средний

5.3 Medium

CVSS3

2.6 Low

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2018-0741

CVSS3: 5.5

msrc

почти 8 лет назад

Microsoft Color Management Information Disclosure Vulnerability

GHSA-8xq3-m779-3h42