The details are in the bulletin MS04-025.

If you're an IT Pro and not already signed up for the Security Bulletin Notification Email service, or the RSS Feed if you'd prefer to use an aggregator.