From Slashdot news (http://slashdot.org/) coverage: A post to Bugtraq from SecurityTracker.com reports an Internet Explorer 5 exploit that has been released (http://www.securitytracker.com/alerts/2004/Feb/1009067.html) based on the Win2K code leak: 'It is reported that a remote user can create a specially crafted bitmap file that, when loaded by IE, will trigger an integer overflow and execute arbitrary code.' Only affects IE 5 apparently, but still it didn't take long.