Security bulletin 04-034 [part of Windows Update] KB 873376
Microsoft Security Bulletin MS04-034: Vulnerability in Compressed (zipped) Folders Could Allow Remote Code Execution (873376):
http://www.microsoft.com/technet/security/bulletin/ms04-034.mspx
Zip compression could allow remote code execution