Iphone

With the titanic effort Microsoft put into improving security in Windows Vista, the company must be disappointed that there has been another exploit found that will affect even locked-down users. The flaw works when a malicious person creates a web page with custom animated cursors—apparently Windows does not do sufficient checking of the .ani files and a properly-crafted one could allow the website access with full privileges of the user. Until a patch is issued, there is no way to disable this feature in older versions of Windows, or at least none listed in the Microsoft Knowledge Base article.
Internet Explorer 7 in Protected Mode (available only in Windows Vista) mitigates this problem. Microsoft is also pushing hard for people to log into their PCs with less then administrative rights, which would help in this case.
It's telling that although this vulnerability affects all recent versions of Windows, it has a much-reduced impact under Vista. I suspect that even with the Trusted Computing intuitive and the fact that Vista was rewritten using managed code for many of the parts that interact with the user, Microsoft will continue to struggle with bugs and security holes related to backwards compatibility for some time to come. In the long run, I expect the adjustment to take place just like it did moving from Win16 to Win32, but it's going to take a lot more effort than the port to Win64 is requiring. Compilers will take most of the burden of switching to the new processors off developers, but learning to write secure code will take more work.



Source:New animated cursor vulnerability affects Vista as well