A critical bug in WMP9 and 10 has been discovered and there already is a proof of concept code that can exploit it.

Read more about it here

Test your player to see if its vulnerable here (Proof of Concept test file) -- I tested mine and it wouldnt play it (Got an error message (wmp9))

Grab a patch from Microsoft here