Microsoft has updated the Security Bulletin MS04-022 (Task Scheduler). Thanks Sampson.

A remote code execution vulnerability exists in the Task Scheduler because of the way that it handles application name validation. There are many ways that a system could be vulnerable to this attack. An attacker who successfully exploited this vulnerability could take complete control of an affected system. However, user interaction is required to exploit this vulnerability.

Read more