Vulnerability in Windows URI Handling Could Allow Remote Code Execution (MS07-061)

[newsbot]

A remote code execution vulnerability exists in the way that the Windows shell handles specially crafted URIs that are passed to it. An attacker could exploit this vulnerability by including a specially crafted URI in an application or attachment, which could potentially allow remote code execution.

http://www.securiteam.com/windowsntfocus/6T00E15KAC.html