SECURITY: Microsoft animated cursor security fix now available

[Trippy]

http://windowsupdate.microsoft.com/

or

http://www.microsoft.com/technet/security/bulletin/ms07-apr.mspx

This is a critical security fix for a security flaw with animated cursors that's being actively exploited.

Edit: Damned if you do, damned if you don't. The above patch is breaking some applications. Install with caution. MS Knowledge Base article with hotfix below:

http://support.microsoft.com/kb/935448/

[Samwise]

I tried to pick through the web pages to find out what the flaw was, but I couldn't find anything useful.  How the hell do you exploit a security flaw with cursors?  Do you have to actually install a new animated cursor file that contains the exploit, or is it something much more insidious?

[Trippy]

You just have to go to a Web site that sends you one (which you automatically download with no chance to refuse it) or open an HTML email message in something like Outlook that has one embedded in it.

[Trippy]

Bump.

Damned if you do, damned if you don't. The above patch is breaking some applications. Install with caution. MS Knowledge Base article with hotfix below:

http://support.microsoft.com/kb/935448/