Some more News...

'WIN-XP HOLE' MISREPRESENTED | News: SecurityFocus
The real Windows XP vulnerability, according to this commentary, has
been misrepresented as a Universal Plug-and-Play flaw, but the real
problem is in XP's Simple Service Discovery Protocol (SSDP) service.
The SSDP vulnerability arises when specially formatted notify
datagrams are created that can be used to exploit a buffer overrun to
gain system access, or perform DoS or DDoS attacks.

Read More
Here