Stefan Mileschin

Unless you like being vulnerable to remote code execution, I recommend you hit your Windows Update button and get your patch on. Hurry up, go patch that POS PC of yours. Seriously, we're all waiting on you. This security update resolves a privately disclosed vulnerability in Windows common controls. The vulnerability could allow remote code execution if a user visits a website containing specially crafted content designed to exploit the vulnerability. In all cases, however, an attacker would have no way to force users to visit such a website. Instead, an attacker would have to convince users to visit the website, typically by getting them to click a link in an email message or Instant Messenger message that takes them to the attacker's website. The malicious file could be sent as an email attachment as well, but the attacker would have to convince the user to open the attachment in order to exploit the vulnerability.

http://www.hardocp.com/news/2012/04/10/patch_your_pc/