Following the amazing amount of publicity aroused by the recent zero-day security flaw, Microsoft has rushed out a patch. The page you need is:
Microsoft Security Bulletin MS08-078 - Critical
Security Update for Internet Explorer (960714)
Look through the table of Affected Software to find what you have, then click the link to go to the right download page.
You probably have 32-bit Windows XP SP2 or SP3 running IE7, in which case the download is here.
Download the file and run it to install the patch. Sorry, this involves closing down IE and letting the PC reboot. The patch creates its own restore point, but there are no known issues with the installation.
If you are beta testing IE8, you should download the latest version (build 8.0.6001.18344), which has been fixed.
For the curious, the flaw is, in Secunia's words, an Internet Explorer Data Binding Memory Corruption Vulnerability. The Secunia page has direct links to the patches.
Now it will be interesting to see how many of the 1,000+ publications that carried stories about the flaw provide a link to the fix….
