The communication protocol used between the server process and the service control had a flaw that could lead to a local privilege escalation.
CWE-502