An elevation of privilege vulnerability exists when NDIS fails to check the length of a buffer prior to copying memory into it. An attacker who successfully exploited this vulnerability could gain elevated privileges on a targeted system.
To exploit the vulnerability, an attacker would first have to log on to the system. The attacker could then run a specially crafted application designed to elevate privileges. The security update corrects how NDIS validates buffer length.

Further information on this exploit is available at : MS15-117