Article

blogs.zdnet.com — Details of a protocol handler flaw that leads to arbitrary remote command execution and is especially dangerous since it can be deployed widely through the use of a cross-site scripting attack vector.