All right, pretty much everyone has probably heard of the Windows Metafile vulnerability by now.
Here's a new twist, though:
http://www.grc.com/sn/SN-022.htm
http://www.grc.com/x/news.exe?cmd=article&group=grc.news.feedback&item=60006
Steve Gibson claims it looks a whole lot more like an intentional backdoor than a bug. He makes a pretty good case for it.
Now, it occurs to me that the source of Win2k, which is affected by this, was leaked. If somebody had that, they could try to find the code in question, and look at what it actually does. Of course, that would be quite illegal, but it might reveal some interesting answers.