Zero-day vulnerability in Internet Explorer

grumpycrab

I didn't mention Windows7 because I wasn't sure either;)

The security advisory originally said (I cannot find the words now) "Enhanced Protected Mode, on by default for the modern browsing experience in Internet Explorer 10 and Internet Explorer 11, as well as Enhanced Mitigation Experience Toolkit (EMET) 4.1 and EMET 5.0 Technical Preview, will help protect against this potential risk."

To be sure you could deregister the offending DLL as follows (I doubt anybody will notice the impact of this but if they do the security note also includes instructions for re-registering said DLL).

Unregister VGX.DLL

1. Click Start, click Run, type "%SystemRoot%\System32\regsvr32.exe" -u "%CommonProgramFiles%\Microsoft Shared\VGX\vgx.dll", and then click OK.
2. A dialog box appears to confirm that the un-registration process has succeeded. Click OK to close the dialog box.

Impact of Workaround: Applications that render VML will no longer do so once vgx.dll has been unregistered.
When a security update is available to address this issue, you should re-register vgx.dll after installing the security update. To re-register vgx.dll follow these steps:

1. Click Start, click Run, type "%SystemRoot%\System32\regsvr32.exe" "%CommonProgramFiles%\Microsoft Shared\VGX\vgx.dll", and then click OK.
2. A dialog box appears to confirm that the registration process has succeeded. Click OK to close the dialog box.

** Or just use another browser. **

joe134

OneADay wrote: »

It affects all versions of Windows I think - except those running in restricted mode, Windows Server 2008 etc.

Disabling flash plugin is the fix for now. If you have XP, well use a different browser.

http://www.informationweek.com/software/operating-systems/microsoft-no-ie-patch-for-windows-xp/d/d-id/1234903

aint my day, as I said, I use Aol, who piggy back IE, now Aol has been hacked, just had to change their password and security question.
Is anything secure lately:D
using chrome till it's all sorted, unless they lied about heartbleed.:rotfl:

grumpycrab

Microsoft have released a patch for this today. The patch has also been published for XP. I guess it was serious then.
http://blogs.technet.com/b/msrc/archive/2014/05/01/out-of-band-release-to-address-microsoft-security-advisory-2963983.aspx

Oblivion

grumpycrab wrote: »

Microsoft have released a patch for this today. The patch has also been published for XP. I guess it was serious then.
http://blogs.technet.com/b/msrc/archive/2014/05/01/out-of-band-release-to-address-microsoft-security-advisory-2963983.aspx

You don't say!

abibee

It seems Avast! are onto it with an update. I was going off Avast! too.

http://news.softpedia.com/news/AVAST-Releases-Update-to-Protect-Windows-XP-Users-Against-Zero-Day-Flaw-440141.shtml

Still, anyone on XP and still usuing IE as their browser is asking for problems. Firefox or Chrome, or one of their derivatives like PaleMoon are the way.