Microsoft released a patch for the zero-day VML (Vector Markup Language) security hole yesterday, instead of waiting for October's "patch Tuesday". If you have Windows with updates set to automatic, you probably already have it. If not, see: Microsoft security updates for September 2006
Comment: I installed the patch without any obvious problems. It doesn't need a reboot.