There is a new vulnerability in the Windows Media Player that could enable an attacker to execute code on the machine of a user who downloads a skin for the player. A patch is available for those using version 7.1 and Media Player for XP.

http://www.nwfusion.com/news/2002/0627msmphole.html