Improper input validation in Microsoft Surface allows an authorized attacker to execute code over a network.