Vulnerable Systems:
* Sun Microsystems Java Runtime
User interaction is required to exploit this vulnerability in that the target must visit a malicious page.
The specific flaw exists within the implementation of the color profile parser. When processing a particular Tag structure out of a color profile, the parser will read a 32-bit integer and use it to calculate the size for a memory allocation. Due to the result being larger than 32 bits, an integer overflow will occur. This will lead to code execution under the context of the application.
