If you haven't patched yet... patch.

According to the MS Advisory it was only being used in targeted attacks. This has changed now... There's exploit code on a popular exploit website, and apparently there's a worm making the rounds.

Also, kudos to phernandez for the superb article. He manages to get quotes from some pretty incredible people heh.