Local privilege escalation via heap buffer overflow

Heap-based buffer overflow in Microsoft Windows Installer allows local users with existing access to elevate privileges on affected systems. Microsoft identifies the vulnerable component as Windows Installer but has not published the specific parsing path or operation that overruns a heap buffer. Successful exploitation raises the attacker's privileges in the host operating system; no remote path or user interaction is reported.