An Issue with IE

[Zeli]

source: Aube from Aim to Misbehave forums
www.thehotrock.com/HUBs/FotS/WoW/KindredMB.html?Thread=34453&Forum_ID=98&Message_Board_ID=14

Extra important issue... with IE... again.

HI,

you might not be aware but there's a flaw used in all versions of IE, using VML (Vector Markup Language) that allows hackers to virtually own your machine. It has been actively used in more than a thousand websites. The exploit is used to install ad wares, keyloggers (that might be used for WoW, etc...) and other malware.

Microsoft won't release a patch for it until their infamous Patch Tuesdays in October.

In order to "secure" your machine in the meantime, I suggest you go to GRC.com: www.grc.com/sn/notes-058.htm and apply the simple fix that is to unregister the .dll from Windows until Microsoft wakes up and smell the coffee. Microsoft's advisory on the topic: www.microsoft.com/technet/security/advisory/925568.mspx

To unregister the dll, go into the Start menu, use "Run...", then enter the following:

regsvr32 -u "%CommonProgramFiles%\Microsoft Shared\VGX\vgx.dll"

Let me repeat, having "ActiveX" disabled won't protect you.

Of course, I could add that by using Firefox, you wouldn't be vulnerable, but that would be rubbing it

Ciao,
...

[Wrasse]

I run both browsers and am trying to slowly make the permanent switch to Firefox (I'll never tell Aube that though lol). I've just read too many bad things about IE and I think I've pressed my luck for long enough. hehe

[Molley]

I firgure I'll switch when I get a new motherboard and video card...my computer is only a footstool at the moment anyway.

[Kaarenyth]

For what its worth - I am a MS premium subscriber and get all sorts of notices from them. They've already released the patch for this bug - I've got the link somewhere - would assume its on windowsupdate.microsoft.com but not sure, haven't checked yet - I'll try to post it after I check tomrrow if I remember.



Edit: verified - its on windowsupdate.microsoft.com patched my ws (through firefox) and no reboot required - go figure like a first for MS!