Well the Animated Cursor vulnerability within Windows has been getting the Third Party patch treatment over the weekend, with 3 different patches released. Plus we are due to get a Microsoft one too. 

eEye have released a fix for the cursor vulnerability here, ZERT have released a patch for the vulnerability here and finally X-Solve have released on here.

On top of this Microsoft have announced that they will be releasing a patch for the vulnerability early too. It seems that Microsoft had known about the issue since December 2006 and had planned to release at patch for the vulnerability as part of the April patch run.

An announcement in the Microsoft Security Blog indicates that they are planning to get the patch out before the scheduled April patch release on the April 3rd. This is probably due to the increase in active exploitation of the vulnerability over the weekend and the several proof of concept exploits that are now in the public domain.

The latest of the proof of concept exploits are for Metaspoilt, which you can download here and here.

Add this page to your favorite Social Bookmarking websites