In this specific case, this is a valid question: this is round 2 after MS already got the notification they need to fix this issue. Google is back with a specif

In this specific case, this is a valid question: this is round 2 after MS already got the notification they need to fix this issue. Google is back with a specific proof-of-concept after giving Microsoft a high-level description of how to find and fix this vulnerability. As part of MS16-074, some of the bugs were indeed fixed, such as the EMR_STRETCHBLT record, which the original proof-of-concept image relied on. However, we've discovered that not all of the DIB-related problems are gone.