A security vunerability for Windows CE posted in the US-CERT
Cyber Security Bulletin.
Multiple unspecified vulnerabilities in the JPEG (GDI+) and GIF image processing in Microsoft Windows CE 5.0 allow remote attackers to execute arbitrary code via crafted JPEG and GIF images.
For more details see
National Vulnerability Database (CVE-2008-2160)
And update is available from Microsoft
here.