10.286.2004 - MS04-034: Vulnerability in Compressed (zipped) Folders Could Allow Remote Code Execution (873376)

This update resolves a newly-discovered, privately reported vulnerability. A remote code execution vulnerability exists in the way that Windows processes Compressed (zipped) Folders. If a user is logged on with administrative privileges, an attacker who successfully exploited this vulnerability could take complete control of an affected system, including installing programs; viewing, changing, or deleting data; or creating new accounts with full privileges. Users whose accounts are configured to have fewer privileges on the system would be at less risk than users who operate with administrative privileges. However, user interaction is required to exploit this vulnerability. - Download Windows XP / XP SP1 Update - Download Windows XP SP1 64-bit Update - Download Windows XP 64-bit Version 2003 Update - Download Windows Server 2003 Update - Download Windows Server 2003 64-bit Update - View Microsoft Security Bulletin MS04-034 - View Microsoft Knowledge Base Article - 873376 - Visit Microsoft Corporation