A vulnerability has been reported in Microsoft Windows, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to a boundary error within the "InternalOpenColorProfile" function in the Microsoft Color Management System (MSCMS) module of the Microsoft ICM (Image Color Management) component when parsing images. This can be exploited to cause a heap-based buffer overflow via a specially crafted image file.

Successful exploitation may allow execution of arbitrary code when a user e.g. views a specially crafted image or Office document embedding such a file.

Solution
Apply patches.
Further details available in Customer Area

Provided and/or discovered by
Jun Mao, VeriSign iDefense Labs.

Changelog
Further details available in Customer Area

Original Advisory
MS08-046 (KB952954):
http://www.microsoft.com/technet/security/Bulletin/MS08-046.mspx

iDefense Labs:
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=742

Other references
Further details available in Customer Area

Alternate/detailed remediation
Further details available in Customer Area

Deep Links
Links available in Customer Area