Do I have to install Windows XP Service Pack 2 now?
The vulnerability affects Windows itself, which means Office apps, Windows Media Player, MSPaint and even the image preview function in Windows Explorer are affected. This is due to the way Windows reads the format tags of a file. Regardless of weither a trojan is embedded in a jpeg, or if “*.foo” is renamed “*.jpg” and tucked into the page source of a website, Windows and its subsequent line of MS-branded apps will take it for what it claims to be at face value. Though Firefox can shield the problem while browsing, any downloaded images or software containing an exlpoit of the vulnerability could kickstart Internet Explorer and open your ports.
