Code takes advantage of a "critical" vulnerability Microsoft provided a fix for in October.

Code exploits Windows flaw in image file handling