content: This security update resolves a publicly disclosed vulnerability in Windows Shell. The vulnerability could allow remote code execution if the icon of a specially crafted shortcut is displayed.  Amazing how such a seemingly minor little things can open up a hole like that. It makes me wonder if any of these were the result of collusion, pre-planned vulnerabilities if you will, wouldn't surprise me.