Microsoft Windows suffers from a .group file code execution vulnerability that leverages the URL field.