The vulnerability exists when MSXML attempts to access an object in memory that has not been initialized, which may corrupt memory in such a way that an attacker could execute arbitrary code in the context of the logged-on user.
On average, a user has created 17.5 stations, logged feedback in the form of 100 thumbs up or down song ratings, and listens to more than 10 hours per month.