Yet another vulnerability in a Microsoft product, this time affecting Windows 98/SE, Me, NT, and 2000. See Microsoft's explanation and download the patch. More technical details are in the Microsoft Security Bulletin MS02-065 here