The Windows XP exploit that was published by a Google engineer last week is now being exploited in the wild, researchers at Sophos Labs say. The vulnerability could allow remote code execution if a user views a specially crafted Web page using a Web browser or clicks a special link in an e-mail message. Researchers: Malware downloads and executes an additional malicious component (which will shortly be detected as Troj/Drop-FS) on the victim’s computer, by exploiting this vulnerability. Ormandy’s publication of the vulnerability’s details have been the subject of much criticism in the last week.”]