Image handling flaws can infect Windows machines, including XP SP2, when visiting maliciously constructed web sites. This does not just affect Internet Explorer users. Firefox users are apparently vulnerable as well.
More information is available at F-Secure here. This one will garner a LOT of attention in nearly every corner of the web.
Watch Microsoft closely for a patch.