Windows Remote Code Execution Vulnerability

A remote code execution vulnerability exists when Windows image file loading functionality does not properly handle malformed image files. An attacker who successfully exploited the vulnerability could execute arbitrary code.

To exploit the vulnerability, an attacker would have to convince a user to load a malformed image file from either a webpage or an email message.

The update addresses the vulnerability by helping to ensure that image files contents are properly validated.