Microsoft Windows Explorer Remote Script Injection

MODERATE: Microsoft Windows Explorer Remote Script Injection (MS05-024)

Affected:
Windows 2000 SP3/SP4
Description: Microsoft has confirmed the remote script injection vulnerability discussed in the @RISK newsletter posted on April 21, 2005, and released patch MS05-024 to address the issue.