Pope ANI I

Encyclical

"Cursor Redivivus". An animated cursor served by a web page or an email was enough to take over Windows, from 2000 all the way to brand-new Vista. It was a mass-exploited zero-day that Microsoft had to fix out of band, and it was a rerun of an ANI bug already fixed in 2005. The encyclical teaches variant analysis: when you close a hole, check whether an identical one sits right next to it.

Saint page: Saint ANI Cursor

Cardinals

Windows DNS Server RPC overflow (MS07-029), exploited as a zero-day