Microsoft patches up Help and Support

Microsoft has issued a new patch for Windows XP and Server 2003, rated 'important'.

The patch, for the Windows Help and Support Centre, fixes a flaw that could allow malicious code to cross onto PCs via a specially designed web page. Such code could also get in via an email to an unpatched version of Outlook.

Once they had gained access, a hacker would have control of the host PC, allowing it to be used for spamming or denial of service attacks.

Microsoft has warned customers to "install the update at the earliest opportunity".

The patch - the company's fifteenth this year - also removes a feature that allows users to install a DVD decoder automatically, as this could be used maliciously.

The company thanked Donnie Werner of security firm exploitlabs.com for pointing out the DVD flaw.

The patch can be downloaded from Microsoft here.