] "Thanks to a newly found flaw in Windows XP, two of the
] most popular audio file formats can be used by crackers
] to take control of remote PCs. Users only need to hover
] their mouse pointers over the icons for malicious MP3 or
] Windows Media files to execute the attacker's code,
] Microsoft Corp. said in a bulletin published Wednesday.
] The vulnerability lies in the Windows Shell, which is the
] portion of the operating system responsible for defining
] the user's desktop as well as organizing files and
] folders and enabling the OS to start applications. An
] unchecked buffer in a function used by the shell to
] extract custom attribute data from audio files enables an
] attacker to create a malicious MP3 or Windows Media file
] and use it to run code on a remote user's machine. "

Man that just awesome.

XP Flaw Puts MP3, Windows Media Files at Risk