Medium severity5.3NVD Advisory· Published Jan 4, 2018· Updated Jun 17, 2026

CVE-2018-0741

Description

The Color Management Module (Icm32.dll) in Windows 7 SP1 and Windows Server 2008 SP2 and R2 SP1 allows an information disclosure vulnerability due to the way objects are handled in memory, aka "Microsoft Color Management Information Disclosure Vulnerability".

Affected products

Microsoft Corporation/Color Management Module (Icm32.dll)v5
Range: Windows 7 SP1 and Windows Server 2008 SP2 and R2 SP1
Microsoft/Windows 7llm-fuzzy2 versions
SP1+ 1 more
- (no CPE)range: SP1
- cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*
Microsoft/Windows Server 2008llm-fuzzy3 versions
SP2, R2 SP1+ 2 more
- (no CPE)range: SP2, R2 SP1
- cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0741nvdPatchVendor Advisory
www.securityfocus.com/bid/102349nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1040093nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.006
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000