Microsoft has released a patch for the problem. The bug was found by a Finnish security firm, Online Solutions, in March and it submitted its findings to Microsoft on 14th of March.
More information:
InternetNews.com
Microsoft security bulletin and patch












