The vulnerability exists when MSXML attempts to access an object in memory that has not been initialized, which may corrupt memory in such a way that an attacker could execute arbitrary code in the context of the logged-on user.
It will act like a memory box, with a sealed section inside where the victims' relatives will be invited to put an object that reminds them of their loved one.