Security bulletin 04-037 [part of Windows Update] KB 841356
Microsoft Security Bulletin MS04-037: Vulnerability in Windows Shell Could Allow Remote Code Executione (841356):
http://www.microsoft.com/technet/security/bulletin/ms04-037.mspx
Windows Shell