This update resolves a newly-discovered, publicly reported vulnerability. A
remote code execution vulnerability exists in the way that the Windows Shell
launches applications.

If a user is logged on with administrative privileges, an attacker who
successfully exploited this vulnerability could take complete control of an
affected system, including installing programs; viewing, changing, or deleting
data; or creating new accounts with full privileges. However, significant user
interaction is required to exploit this vulnerability. Users whose accounts are
configured to have fewer privileges on the system would be at less risk than
users who operate with administrative privileges.