As we've told you in the past two editions of Security Now! there's a very serious security flaw in all versions of Windows. This hole takes advantage of poor design choice in the Windows metafile interpreter and can be exploited by a malicious web site or by email attachments.