Technical Information

Brief overview of the risk:
This security update resolves a publicly disclosed vulnerability in the Windows Shell graphics processor. The vulnerability could allow remote code execution if a user views a specially crafted thumbnail image. An attacker who successfully exploited this vulnerability could gain the same user rights as the logged-on user.
Detailed Information on the risk:

A remote code execution vulnerability exists in the way that the Windows Shell graphics processor handles specially crafted thumbnail images. An attacker who successfully exploited this vulnerability could run arbitrary code in the security context of the logged-on user.

Further information on this exploit is available at : MS11-006