It is a critical vulnerability in MPEG Layer-3 codecs on Windows 2003/XP computers, which allows hackers to gain remote control of the affected computer with the same privileges as the logged on user.