Add or Remove Programs
entry for Security Update for Windows XP (KB908531)
. This critical security update for Windows XP addresses a vulnerability in Windows Explorer that could allow remote code execution.A remote code execution vulnerability exists in Windows Explorer because of the way that it handles COM objects. An attacker would need to convince a user to visit a Web site that could force a connection to a remote file server. This remote file server could then cause Windows Explorer to fail in a way that could allow code execution. An attacker who successfully exploited this vulnerability could take complete control of an affected system.