Buffer over-read in Windows NTFS allows an authorized attacker to execute code locally.