The issue is related to insufficient access restrictions in the Microsoft .NET Framework, allowing a remote attacker to elevate their privileges. To exploit this, an attacker must first access the local machine and then run a malicious program. The vulnerability is addressed by correcting how .NET Framework activates COM objects.