On average, a user has created 17.5 stations, logged feedback in the form of 100 thumbs up or down song ratings, and listens to more than 10 hours per month.
The vulnerability exists when MSXML attempts to access an object in memory that has not been initialized, which may corrupt memory in such a way that an attacker could execute arbitrary code in the context of the logged-on user.