Microsoft Common Controls Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Common Controls when it accesses an object in memory that has not been correctly initialized or has been deleted. An attacker who successfully exploited this vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. An attacker could exploit the vulnerability by convincing a user to click a specially crafted link, or a link to specially crafted content. The vulnerability is then triggered when the user invokes F12 Developer Tools in Internet Explorer.