MS is supposed to release the update to the .ani cursor vulnerability sometime today, but as of this posting, I haven't seen it available.

"Microsoft's urgency was no doubt spurred in part by unofficial software patches provided by third-party security software vendors, including eEye Digital Security, Determina, and the Zero-Day Emergency Response Team (ZERT), a coalition of security experts focused on providing quick fixes for unpatched software flaws that pose serious risk to computer users."