Ripped from: MS Security alert notification email :D
On November 08, 2001 Microsoft discovered that the Windows ME patch failed to properly register the upnp.dll.
On November 13, 2001 Microsoft released a corrected version of the Windows ME patch.
Title: Invalid Universal Plug and Play Request can Disrupt System Operation
Released: 01 November 2001
Revised: 13 November 2001
Software: Windows 98, Windows ME, Windows XP
Impact: Denial of Service
Max Risk: low
Bulletin: MS01-054