Microsoft Color Management: heap overflow lets network attacker run code

Microsoft's CVE record (CVSS 9.8, network, no authentication, no user interaction) describes a heap-based buffer overflow in Microsoft Color Management that allows code execution. No Microsoft advisory text was readable, so the affected Windows builds, the fixing update and whether the component is reachable by default over the network are unknown.