Microsoft released a patch today for the dangerous zero-day Windows flaw involving animated cursor files and Windows XP SP2. Attacks against the flaw continued over the weekend, and the release of publicly available exploit code prompted Microsoft to release the patch out-of-schedule - the normal monthly patch batch is due next Tuesday.
You should get the fix (or a prompt, depending on your settings) via Automatic Updates, but it wouldn't hurt to kick off a Windows Update yourself and get it now yourself. The patch should come across as "MS07-017."
