This is fixed in MS05-039, which can be downloaded from Windows Update, or will get installed on XP machines through Automatic Updates.
Details here:
http://www.microsoft.com/technet/sec.../MS05-039.mspx
(KB 899588)
5 days from it being disclosed to MS and a public fix being available.