The vulnerability affects all recent Windows versions, including Vista, which Microsoft has promoted heavily for its security. The operating system software is flawed in the way it handles animated cursors, Microsoft said in a security advisory.
An attacker could exploit the vulnerability through a Web page or e-mail message with rigged computer code, Microsoft said.
For more info click here