The vulnerability results because of an unchecked buffer (a temporary storage area of limited capacity) in the Windows User Environment.