Microsoft Windows 2000 Patch: Relative Shell Path

Under certain conditions, this vulnerability allows a malicious user, who has physical access to a computer, to alter the code in the executable file Explore.exe. This file provides the Windows Shell functionality of the desktop, and a change in the code could alter the desktop functionality. If this occurs, the code substitution runs automatically for any subsequent user. This vulnerability exists because Explore.exe is specified by a relative path, rather than an absolute path, in the registry key that Windows consults during startup. If it is placed in a certain location, the substitute version of the executable file is loaded when the computer starts.

For more information about this vulnerability, read Microsoft Security Bulletin MS00-052.