Microsoft is fixing a well-known bug in Window XP and Windows Server 2003 that has been at the root of vulnerabilities. The bug relates to the Uniform Resource Indicator (URI) handler in Windows that allows you to launch other programs to support a clicked link.
Link: infoworld.com