Flaw in Windows Media Player 9

A flaw in the way artist, album name, and song name information in a media file is retrieved could be exploited by an attacker to run code on the affected machine. An attacker could overwrite the metadata information with scripting commands, which would be executed on the target user’s machine. Windows Media Player 10 fixes the flaw, but that is not available on non-XP machines. Not sure if Microsoft has released a fix for those of us not using XP.