MS05-054

Perhaps it has to be executed two time to make the exploit works: