Out-of-bounds read in Windows Internet (wininet.dll) allows an authorized attacker to disclose information locally.