Good ol' Micro$haft
I wonder if this'll take them ten years, like the font rendering exploit in their kernel.
Meanwhile, looks like Samsung has sorted that Exynos bug which RICHTO got so excited about:
http://www.sammobile.com/2013/01/03/galaxy-s-iiis-latest-software-update-fixes-exynos-security-exploit-sudden-death-issue-too/
3 wks... and over Christmas & new year B-)