<A target="_blank" href="http://www.computerworld.com/s/article/9203179/Microsoft_confirms_new_Windows_zero_day_bug">The exploit is in the wild and Microsoft is working on a patch.</A> The patch will not be released "out of band", so Microsoft has issued instructions on a workaround. The vulnerability exists in Windows XP, Vista, Server 2003 and Server 2008.