Fix your Windows, says Microsoft

Microsoft says there is no evidence the hole has been exploited so far

Microsoft is urging users of its new Windows XP operating system to download the fix for a serious security hole.

The problem was discovered by a security firm a few weeks ago but announced on Thursday once a fix was ready.

We are going out very publicly with the media - admitting or notifying that a vulnerability does exist - and that it is important to patch systems

Microsoft spokesman

Left unrepaired, the hole gives malicious hackers the chance to take over a Windows XP machine as soon as it is connected to the internet.

eEye Digital Security, which found the hole, describes the problem as "high risk".

Microsoft says there is no evidence the hole has been exploited so far.

Unprecedented risk

The company releases a steady stream of security fixes and improvements for its Windows operating systems and its Internet Explorer browser.

It usually does so without great fuss, so it would appear that this particular hole is more serious than most.

Windows XP was launched this autumn

For individual users, Microsoft provides updates to its more recent versions of Windows via an option on the Start menu called Windows Update.

The company sold more than 7 million copies of Windows XP in the two weeks after it was launched on 25 October, and many hope it will be a boost for the troubled technology industry.

It had been billed as the most secure Windows version ever.

Fix-it

Now, the company is urging all Windows XP customers and those using previous versions of Windows, including Windows 98, 98 SE or ME, who have fitted the Universal Plug and Play service, to download a patch, available on the company's website, and install it immediately.

"We are in the process of notifying our customers," said Microsoft spokesman Jim Desler.

"We have mobilised all of our technical account managers worldwide who work with big clients and we have a very broad e-mail list for e-mail notification.

"We are going out very publicly with the media - admitting or notifying that a vulnerability does exist - and that it is important to patch systems," he added.