"Critical" flaw affects Microsoft's media player and browser, including on Windows XP with SP2, a security firm reports.

Security flaw touches Windows Media Player, IE