
Microsoft has just patched <A HREF="http://www.pcworld.com/article/id,132082-pg,1/article.html">another critical hole in Vista</A> that it has known about as long ago as last Christmas. The delay was similar to its lag in patching the animated-cursor flaw.
The new problem involves the way that the OS's Client/Server Run-time Subsystem handles error messages, and it affects Windows 2000 SP4 and Windows XP too. This flaw may not be as severe as the cursor problem, as Microsoft says you'd have to perform certain unspecified "actions" on a malicious Web site before an assault could succeed.