Use of uninitialized resource in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information locally.