A potentially serious security hole has been discovered in fully patched versions of Windows XP SP2, even with the integrated firewall turned on.

Microsoft Investigates New XP SP2 Flaw