Forwarded to me by John Gerth …an e-mail attachment exploited an Excel 0-day. Simple, but effective.

http://www.f-secure.com/weblog/archives/00002226.html