fully patched xp/2003

is still vulnerable. a zero day exploit being reported.

Malicious hackers exploit zero-day Windows flaw - Computerworld