writes "Welcome to the brave new world where animated cursors can execute remote code in windows. Microsoft released Security Advisory 935423 today announcing the issue. Oh, there is no patch at this time. Microsoft's official recommendation at this time: "Do not visit untrusted websites or view unsolicited email". And yes, Vista along with all the rest are vulnerable according to this SecurityFocus article."