Windows XP security advisory warns of zero-day glitch

Microsoft today issued a security advisory to Windows XP users saying that a glitch in Internet Explorer makes it possible for malicious users to craft code that would produce a fake Windows help file.

Specifically, if users come across a Web site that appears to have a Windows dialogue box that says to press F1, they should direct away from the site. Pressing F1 could lead to the execution of computer-disabling processes. A researcher who found the bug calls it a "logic flaw". It allows hackers to legitimately disguise the hack as a Windows help file.