Microsoft warns of zero-day attack

The vulnerability in XML Core Service, being actively exploited, affects all supported versions of Windows and Office 2003 and 2007.