The host is missing an important security update according to Microsoft security bulletin, MS09-057. The update is required to fix remote code execution vulnerability. A flaw is present in the ActiveX control included with Windows Indexing Service, which fails to handle specifically crafted Web content. Successful exploitation allows an attacker to execute arbitrary code and could take complete control of an affected system.