Not Microsoft, but a Russion security company has released a patch for Windows XP SP2. The leak is in the so-called DEP-mechanism (data execution protection). DEP checks the memory to prevent hazardous programs from executing. Security experts from the russian Positive Technologies discovered the leak in SP2 just before christmas. They reported it with Microsoft, but the software maker asked to wait on further notice. Because Positive Technologies still hasn't received a notice after one month of waiting, the company decided to release a patch of their own, named PTmsHORP. (russian)(english)