A vulnerability has been identified in Microsoft Windows, which could allow attackers to gain knowledge of sensitive information. This issue is caused due to Windows Search not properly restricting the environment within which scripts execute, which could allow the disclosure sensitive information, the forwarding of user data to a third party, or access to data on the affected system by tricking a user into opening or previewing a file placed on the system or in an e-mail message in an indexed mail box.