From http://secunia.com/advisories/22883/
Successful exploitation allows execution of arbitrary code, but requires Administrator privileges... Um???