Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 do not properly handle OLE objects in memory which allows remote attackers to execute arbitrary code via a crafted object in a file aka \OLE Property Vulnerability.\