06.163.2007 - MS07-035 - Critical: Vulnerability in Win 32 API Could Allow Remote Code Execution (935839)

Bulletin Severity Rating:Critical - This critical security update resolves a privately reported vulnerability in a Win32 API. This vulnerability could allow remote code execution or elevation of privilege if the affected API is used locally by a specially crafted application. Therefore applications that use this component of the Win32 API could be used as a vector for this vulnerability. For example, Internet Explorer uses this Win32 API function when parsing specially crafted Web pages. - View Microsoft Security Bulletin MS07-035 - View Microsoft Knowledge Base Article - 935839 - Visit Microsoft Corporation