The exploit craft a malicious BMP file to perform buffer overflow in Media Player. Keeping in mind as Microsoft has pointed out that the exploiting factor can include other graphics file as well (such as .wmp), it’s a good idea to get it patched ASAP. Read more about Vulnerability and how to patch here.

Only 5 days after the release of the vulnerability, two exploits are on the street. Both exploits, tested on WINXP SP2, will give the attacker the ability to run code of her or his choosing on the compromised machine. As of this writing, a patch has not been made available, as far as we know.