QUOTE
This was just announced. It's a 0 day vulnerability and is currently exploited by malicious sites using drive-by-downloads (shared via spam links, hacked sites, theoretically ads). All versions of Internet Explorer running on Windows XP and Windows Server 2003 are affected.
It involves exploiting an ActiveX control related to video and unlike other 0 day flaws, the "bad guys" have already known about (and taking advantage of it) for at least a week.
Yeah, you could call this bad.
What you should do: If you have XP, stop using IE NOW or apply this temporary workaround. No fix is ready at this time through Windows Update.
AP article
MS Security Advisory
It involves exploiting an ActiveX control related to video and unlike other 0 day flaws, the "bad guys" have already known about (and taking advantage of it) for at least a week.
Yeah, you could call this bad.
What you should do: If you have XP, stop using IE NOW or apply this temporary workaround. No fix is ready at this time through Windows Update.
AP article
MS Security Advisory
(This is simply a copy/paste from another forum I found it on, I am not the author)
http://support.microsoft.com/kb/972890
