[Eagle9]

US-CERT Vulnerability Note #416092

(excerpt)

III. Solution

We are currently unaware of a practical solution to this problem. Until a patch or update is available consider the following workarounds:

Refer to the following workarounds listed in Microsoft Security Advisory (925568):

• Un-register Vgx.dll on Windows XP Service Pack 1; Windows XP Service Pack 2; Windows Server 2003 and Windows Server 2003 Service Pack 1

• Modify the Access Control List on Vgx.dll to be more restrictive
• Configure Internet Explorer 6 for Microsoft Windows XP Service Pack 2 to disable Binary and Script Behaviors in the Internet and Local Intranet security zone

Do not follow unsolicited links

In order to convince users to visit their sites, attackers often use URL encoding, IP address variations, long URLs, intentional misspellings, and other techniques to create misleading links. Do not click on unsolicited links received in email, instant messages, web forums, or internet relay chat (IRC) channels. Type URLs directly into the browser to avoid these misleading links. While these are generally good security practices, following these behaviors will not prevent exploitation of this vulnerability in all cases, particularly if a trusted site has been compromised or allows cross-site scripting.

______________________________________________________________________

I choose to use an alternative solution: Firefox or Opera as my browser.

[DollyCali]

The joys of computer ownership/use BUMP.

thanks for info. I use mozilla 99% of time. The other day I could NOT open a weboage w/mozilla for some reason.. went to IE & no problem.

well, yes there was, The problem was that it bothered me that IE could do something Moz could not! (well, perhaps MS has loaded some "little treasures" to make Mozilla less than perfect?

[steve-b]

New Exploit Rocks IE

Clinton Tells Another Lie
Muslims Blame Another Problem on US, Israel
Sun Rises In East Again

[KayEyeDoubleDee]

Do any of you people know how to get Firefox to display MS Exchange/Outlook Web email correctly? It does things like put any subfolders of Inbox over to the right along with the email headers, and it doesn't seem to want to include the preview window.

[Eagle9]

How To Defend Against IE's VML Bug
http://www.freerepublic.com/focus/f-news/1705072/posts (9/20/2006)

[BJClinton]

Does anyone still use Internet Explorer?