Impact: Remote
attackers can execute arbitrary code.
Root Cause: Software
Vulnerability
Microsoft Windows contains a vulnerability that
can allow an attacker to execute arbitrary code. The
vulnerability is due to improper bounds checking by the
Microsoft Color Management Module when performing ICC profile
format tag validation. Attackers can exploit the vulnerability
by creating a carefully crafted image and enticing a victim into
viewing it.
