Windows DVD Maker in Windows 7 SP1 Windows Server 2008 SP2 and R2 SP1 and Windows Vista SP2 does not properly parse crafted .msdvd files which allows attackers to obtain information to compromise a target system aka \Windows DVD Maker Cross-Site Request Forgery Vulnerability.\