MS07-061: Vulnerability in Windows URI Handling Could Allow Remote Code Execution (943460)
High Nessus Plugin ID 28183
SynopsisVulnerabilities in the Windows Shell may allow a user to elevate his privileges.
DescriptionThe remote version of Windows contains a version of the Windows Shell that contains a vulnerability in the way it handles URI.
An attacker might use this flaw to execute arbitrary commands on the remote host using attack vectors such as IE or other tools.
SolutionMicrosoft has released a set of patches for Windows XP and 2003.