Microsoft to release patch for killer cursor vulnerability

Posted by Humphrey Cheung

Redmond (WA) - Microsoft is working “around the clock” on an official patch for the Windows Animated Cursor Handling vulnerability that is running wild on the Internet.  According Christopher Budd from Microsoft’s Security Response Center the patch should be available Tuesday April 3rd which is one week earlier than the traditional “Patch Tuesday” release.

Budd said that Microsoft was able to finish the patch quickly because it had been working on a fix since last December 2006.  The patch was originally scheduled to come out next Tuesday, but the spate of recent attacks and the release of online exploit code has forced the company to speed up its efforts.

Earlier today, eEye Digital Security released its unofficial patch against the .ANI animated cursor vulnerability.

You can read Budd’s Technet blog entry detailing the upcoming patch here .