The vulnerability is related to insufficient input validation in the libarchive library of the Windows operating system. It allows remote attackers to execute arbitrary code and affect the system. An attacker could exploit this bug by enticing a user into extracting a crafted RAR archive.