This Metasploit module exploits a vulnerability on EPATHOBJ::pprFlattenRec due to the usage of uninitialized data which allows to corrupt memory. At the moment, the module has been tested successfully on Windows XP SP3, Windows 2003 SP1, and Windows 7 SP1.
2612430b8b89a0e631ac0fc7cddbfe75efb7eff156c315c62b9215b7b3af9cda