Computerworld reports that Microsoft has confirmed that Windows XP and Windows Server 2003 contain an unpatched bug that could be used to infect PCs

Microsoft on Thursday confirmed that Windows XP and Windows Server 2003 contain an unpatched bug that could be used to infect PCs by duping users into visiting rigged Web sites or opening attack e-mail.

The company said it has seen no active in-the-wild attacks exploiting the vulnerability.

  Microsoft confirms critical Windows XP bug