Most Mac OS X (and probably Linux users) aren't affected unless they've enabled some Unix services.
You can run this in the Terminal to check:
Code:
env x='() { :ignored function;}; echo this should not show' bash
You would also have to be running some sort of software that can be run over the Internet and can invoke Bash when run.
Server owners should be worried. Home users not so much.