vml exploit (internet explorer) and workaround

From F-Secure:

Once again there is a browser vulnerability that allows for the remote execution of code. And the only action necessary to become infected is to view a malicious webpage using Internet Explorer or an HTML formatted e-mail.

It was discovered in the wild by Sunbelt. Microsoft published Microsoft Security Advisory (925568) yesterday regarding the issue. The update is currently scheduled for October 10th - the next regular patch Tuesday. [ Read More... ]

They also list a workaround, which is to unregister vgx.dll. Like the Windows WMF Vulnerability from the beginning of this year, I guess I’ll write another batch file to silently unregister the DLL, use Group Policy to enforce it, then start rebooting all the computers in our building…

Hmm, guess I should go ahead and reboot the laptop into Windows and do that. At least I can be comfortable laying here on the couch while I’m doing it. sigh

Share and Enjoy:
  • StumbleUpon
  • Digg
  • Reddit
  • Facebook
  • del.icio.us

Related Posts:
  • ie 0-day exploits in the wild
  • windows wmf vulnerability
  • ie 0-day in the wild (soon)
  • ids and exploit demo
  • making the jump to ie7

  • One Comment

    1. bitacle.org:

      Bitacle Blog Search Archive - VML Exploit (Internet Explorer) and Workaround

      [...] VML Exploit (Internet Explorer) and Workaround From F-Secure: Once again there is a browser. [...]

    Leave a comment