Use of uninitialized resource in Windows Installer allows an unauthorized attacker to disclose information over a network.
CWE-908