However, a significant mitigating factor is that the vulnerability only affects Windows systems with the Aero theme installed, which is not switched on by default in Windows Server 2008 R2 ...