A critical bug in WMP9 and 10 has been discovered and there already is a proof of concept code that can exploit it.
Read more about it here
Test your player to see if its vulnerable here (Proof of Concept test file) -- I tested mine and it wouldnt play it (Got an error message (wmp9))
Grab a patch from Microsoft here