This critical security update resolves a privately reported vulnerability in a
Win32 API. This vulnerability could allow remote code execution or elevation
of privilege if the affected API is used locally by a specially crafted application.
Therefore applications that use this component of the Win32 API could be
used as a vector for this vulnerability. For example, Internet Explorer uses
this Win32 API function when parsing specially crafted Web pages.