Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges over a network.
According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do? An attacker must send a user a malicious Office file and convince them to open it. What privileges could be gained by an attacker who successfully exploited this vulnerability? An attacker who successfully exploited the vulnerability could execute code in the kernel.
esakis