Component Object Model Elevation of Privilege Vulnerability

<p>An elevation of privilege vulnerability exists when Component Object Model (COM) client uses special case IIDs. An attacker who successfully exploited this vulnerability could run arbitrary code with elevated system privileges.</p> <p>An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.</p> <p>The security update addresses the vulnerability by correcting how COM handles special case IIDs, to help preclude unintended elevated system privileges.</p>

Where it's fixed