According to the main PHP.net website, the Windows binaries for the latest PHP 5.2.x build have been posted:

The PHP Development Team would like to announce the availability of a new Windows build of PHP - PHP 5.2.9-1. This release focuses on fixing a security flaw introduced by the cURL library (CVE-2009-0037). Please see the following for a full description: http://curl.haxx.se/docs/adv_20090303.html Please note that the cURL related function is disabled when open_basedir or safe_mode enabled.

You can grab this new update from either the main downloads page on the PHP.net site or from your favorite local mirror.