CVE-2017-0061: Microsoft Windows 7

Medium severity, CVSS 5.3. EPSS: 43.1% chance of exploitation in the next 30 days.

The Color Management Module (ICM32.dll) memory handling functionality in Windows Vista SP2, Windows Server 2008 SP2 and R2, and Windows 7 SP1 allows remote attackers to bypass ASLR and execute code in combination with another vulnerability through a crafted website, aka "Microsoft Color Management Information Disclosure Vulnerability." This vulnerability is different from that described in CVE-2017-0063.

Affected products

• Microsoft Windows 7: any version
• Microsoft Windows Server 2008: any version; version r2 only
• Microsoft Windows Vista: any version

Published 2017-03-17. Last modified 2026-06-17.