A vulnerability has been discovered in Microsoft Windows, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to an integer truncation error in the common control library (comctl32.dll) when processing certain messages and can be exploited to e.g. cause a heap-based buffer overflow.

Successful exploitation allows execution of arbitrary code.

The following products are currently known to present valid attack vectors:
* Adobe SVG Viewer 3.03

Other versions and applications using the vulnerable library may also be affected.

Solution
Apply patches.
Further details available to Secunia VIM customers

Provided and/or discovered by
Originally reported in Adobe SVG Viewer to Secunia by Krystian Kloskowski (h07).

Additional details provided by Secunia Research.

Changelog
Further details available to Secunia VIM customers

Original Advisory
MS10-081 (KB2296011):
http://www.microsoft.com/technet/security/bulletin/ms10-081.mspx

Other references
Further details available to Secunia VIM customers

Technical Analysis
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers