Windows Animation Manager Memory Corruption Vulnerability

A remote code execution vulnerability exists when the Windows Animation Manager improperly handles objects in memory. An attacker who successfully exploited the vulnerability could install programs; view, change, or delete data; or create new accounts with full user rights.

An attacker could exploit the vulnerability by convincing a user to visit a malicious webpage.

The security update addresses the vulnerability by correcting how the Windows Animation Manager handles objects in memory.