Computer code that exploits a "critical" flaw appears on the Net, prompting Microsoft to issue a security advisory.

Attack code for Windows flaw heightens risk