OSNews

"Hey Folks - this is Mike Reavey. We're all glad that MS07-017 - the Security Bulletin that fixes the vulnerability in Animated Cursor Handling - has been released, helping to block attacks on that vulnerability. While we released it within 5 days of being notified of attacks, we have received questions from customers about why it took us 3 months to develop and release the fix for this vulnerability. I wanted to provide some insight into the history of this vulnerability, and while doing so, hopefully provide insight into the overall security update lifecycle, including testing, which consumes the greatest amount of time."