This update resolves a publicly reported vulnerability. A remote code e
xecution vulnerability exists in the way that the Windows shell handles specially
crafted URIs that are passed to it. If the Windows shell did not sufficiently
validate these URIs, an attacker could exploit this vulnerability and execute
arbitrary code. Microsoft has only identified ways to exploit this vulnerability
on systems using Internet Explorer 7. However, the vulnerability exists in a
Windows file, Shell32.dll, which is included in all supported editions of
Windows XP and Windows Server 2003.