<A target="_blank" href="http://www.networkworld.com/news/2011/110411-duqu-exploits-same-windows-font-252779.html?source=nww_rss">Last month Microsoft patched the True Type parsing engine</A>. Now it seems the Duqu Trojan uses the same vulnerability. Microsoft is not planning an "out-of-band" patch for the problem.