Can crash msn and execute commands
Windows has a buffer overflow vulnerability in the processing of embedded ICC Profiles inside images (jpeg, tiff, etc...). To test - create a jpeg in adobe photoshop and save it with the ICC checkbox enabled, make sure you set it to RGB (that does not really matter, just so you can find which bytes to change for the test). Open in a hex editor and search for "RGB XYZ " (no quotes, case sensitive). You are now inside the header of the ICC Profile which is 128 bytes. 104 bytes away is a 4 byte number which is the Tag Count of the ICC Profile. Change this to "FF FF FF FF" (it will be followed by a 4 byte string which is part of a 12 byte tag. there are several such tags, it should help you identify which bytes to change). Save, open in internet explorer, and see the crash.
