Microsoft Security updates - December 2011 (Patch now)
MS11-087 True Type Font Kernel Drivers CVE-2011-3402 is rated as a PATCH NOW for the level of importance, as it actively being exploited in the wild
Microsoft Security updates - December 2011
http://technet.microsoft.com/en-us/security/bulletin/ms11-dec
ISC Analysis of Microsoft Security updates - December 2011
(always an excellent resource)
http://isc.sans.edu/diary.html?storyid=12193