A remote code execution vulnerability exists in the way that Microsoft Color Management System (MSCMS) module of the Microsoft ICM component handles memory allocation. The vulnerability could allow remote code execution if a user opens a specially crafted image file. The risk is MEDIUM. An attacker who successfully exploited this vulnerability could take complete control of an affected system.


More...