We have released Security Advisory 2219475, addressing the vulnerability in the Windows Help and Support Center function in Windows XP and Windows Server 2003. We are not aware of any active attacks at this time. Customers running Windows Vista, Windows 7, Windows Server 2008 and Windows Server 2008 R2 are not vulnerable to this issue or at risk of attack.
We recommend that customers follow the guidance in the Advisory, noting the mitigations and workarounds. The Security Research and Defense team has a blog with more technical details about this issue.
