Microsoft Windows gdiplus bParseWin32Metafile Out-Of-Bounds Read Information Disclosure Vulnerability

Microsoft Windows gdiplus bParseWin32Metafile Out-Of-Bounds Read Information Disclosure Vulnerability allows remote attackers to disclose sensitive information. User interaction is required to visit a malicious page or open a malicious file. The vulnerability exists in the parsing of emf files in the gdiplus library due to lack of proper data validation, resulting in a read past the end of an allocated buffer. This can be leveraged to execute code in the current process