There is a vulnerability in Microsoft Terminal Server when an application is specified for the user instead of a full Windows Desktop. It is possible to easily cause an error in explorer.exe and to gain access to a full Desktop. This is an issue for anyone publishing applications through TS to domain users who also logon to full desktops either on the TS or on another machine.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/49346/msterminal.txt
Source: https://packetstormsecurity.com/files/49346/msterminal.txt.html