An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the users system.An attacker who had already gained execution on the victim system could exploit this vulnerability by running a specially crafted application.The update addresses the vulnerability by correcting how Media Foundation handles objects in memory.