From Slashdot.

Public Exploit For Windows JPEG Bug

Khoo writes “A sample program hit the Internet on Wednesday, showing by example how malicious coders could compromise Windows computers by using a flaw in the handling of a widespread graphics format by Microsoft’s software. Security professionals expect the release of the program to herald a new round of attacks by viruses and Trojan horses incorporating the code to circumvent security on Windows computers that have not been updated. The flaw, in the way Microsoft’s software processes JPEG graphics, could allow a program to take control of a victim’s computer when the user opens a JPEG file.” We mentioned this earlier.

Microsoft has a security bulletin on this issue here. You can also download patches for it. It’s important; if you actually go to websites, you should probably want to take a look at this. Jonathan says people with SP2 don’t need a patch though, and I don’t see any patches for “Microsoft Windows XP Service Pack 2″ on that page.