Can you say bad path?

There has been a lot of talk about the recent .LNK exploit so naturally I had to play with some shortcuts in a hex editor. Turns out that explorer seems to trust whatever content is in the ItemIdList!