Widespread exploitation of an unpatched Windows vulnerability involving cursor animation files over the weekend have prompted Microsoft to announce plans to release an out-of-sequence patch on Tuesday.

A stack buffer overflow flaw in Windows' handling of animated cursor (.ANI) files, discovered last week, allows hackers to inject hostile code into unpatched systems. Internet Explorer can process ANI files in HTML documents, so web pages and HTML email messages can also be vectors for the vulnerability.