New Microsoft Flaw

[Starrob]

http://news.com.com/Microsoft+investigates+potential+new+IE+flaw/2100-1002_3-5837611.html?tag=nefd.top

[ronjor]

-{ Quote: "Microsoft late Thursday issued an advisory with pre-patch workarounds to counter the public release of a zero-day exploit targeting users of its Internet Explorer browser" }-
Story (http://www.eweek.com/article2/0,1895,1849948,00.asp)

[Tom772]

-{ Quote: "Story (http://www.eweek.com/article2/0,1895,1849948,00.asp) " }-Once again, i owe you a beer!!;) T

[Kye-U]

For Proxomitron users, a workaround:

[Patterns]
Name = "IE: Msdds.dll Class ID Exploit Remover [Kye-U]"
Active = TRUE
URL = "(^$TYPE(css))"
Limit = 64
Match = "clsid:EC444CB6-3E7E-4865-B1C3-0DE72EF39B3F"
Replace = "$ALERT(Msdds.dll Class ID Exploit Removed on:\n\n\u)"

[Notok]

I submitted the MS page with all the CLSIDs to Online Armor, so hopefully the appropriate ones will be added to it's web shield soon :)

[ronjor]

'Killbit' Workaround for Zero-Day IE Flaw Available

-{ Quote: "The SANS Internet Storm Center has released a "killbit" package as a temporary workaround to help Internet Explorer users thwart malicious hacker attacks." }-

Link (http://www.eweek.com/article2/0,1759,1850357,00.asp?kc=EWRSS03119TX1K0000594)

[Bubba]

-{ Quote: "'Killbit' Workaround for Zero-Day IE Flaw Available" }-For those users of programs such as Spywareblaster which has the capability to add custom ActiveX kill-bits....they can add the below CLSID which will set the "killbit" for msdds.dll.

EC444CB6-3E7E-4865-B1C3-0DE72EF39B3F

As noted in the Sans article....http://www.wilderssecurity.com/images/icons/icon4.gif "Of course, this will break ActiveX applications which use msdds.dll legitimately. Use at your own risk, and let us know if you find any such ActiveX applications."

[Tom772]

Bubba, does any of this affect usrs of Firefox, or does this just relate to IE or the Operating System in general?

Thanx T