Windows Media Center in Windows Server 2008 could allow a user-assisted remote attacker to execute arbitrary code via a specially crafted Media Center link (MCL) file. MCL files consist of XML definitions that describe a Windows Media Center resource.