Zero day flaw for Windows XP exploited
 

A ZERO DAY FLAW in Windows XP that was outed last week by a Google engineer is being exploited.

According to media friendly Graham Cluley, senior technology consultant at the insecurity firm Sophos a compromised website is serving an exploit of the bug in Windows' Help and Support Center to hijack PCs running Windows XP.

Cluley has not identified the website, but said that the exploit is a classic drive-by attack that only requires a Windows XP user to visit it.

http://www.theinquirer.net/inquirer/...s-xp-exploited