I shouldn’t be surprised anymore.
Microsoft released yesterday a whole bunch of critical security updates. Out of these, MS03-043 is a flaw in the Windows Messenger Service (not MSN Messenger) with the possibility of a remote attacker gaining complete control of a Windows NT/2000/XP/2003 based PC remotely.
Take another look at [[Computer Security and Operating Systems]] for a refresher on wny.