Microsoft has gone public to warn about a zero-day vulnerability in the Windows XP kernel. The bug is in the NDPROXY.SYS driver, which co-ordinates the operation of Microsofts Telephony API (TAPI) The exploit doesnt allow remote code execution on its own, only an elevation of privilege (EoP) The vulnerability exists in Windows XP and Server 2003 only. No formal patch or Fixit has been published yet. A simple registry tweak can immunise an XP computer against the vulnerability.”]