Arbitrary code can be executed on the remote host through the web or
email client.
Description :
The remote host is running a version of Windows which contains a flaw
in the Windows XML Core Services..
An attacker may be able to execute arbitrary code on the remote host
by constructing a malicious script and enticing a victim to visit a
web site or view a specially-crafted email message.
Solution :
Microsoft has released a set of patches for Windows 2000, XP, 2003,
Vista and 2008: