Buffer over-read in Windows COM+ Event System Service allows an authorized attacker to disclose information locally.
CWE-126