New Microsoft Flaw

http://news.com.com/Microsoft inves...IE flaw/2100-1002_3-5837611.html?tag=nefd.top

 

Re: Microsoft Warns of IE Zero-Day Exploit

Once again, i owe you a beer!! T

 

Re: Microsoft Warns of IE Zero-Day Exploit

For Proxomitron users, a workaround:

Code:

[Patterns]
Name = "IE: Msdds.dll Class ID Exploit Remover [Kye-U]"
Active = TRUE
URL = "(^$TYPE(css))"
Limit = 64
Match = "clsid:EC444CB6-3E7E-4865-B1C3-0DE72EF39B3F"
Replace = "$ALERT(Msdds.dll Class ID Exploit Removed on:\n\n\u)"

 

Re: Microsoft Warns of IE Zero-Day Exploit

I submitted the MS page with all the CLSIDs to Online Armor, so hopefully the appropriate ones will be added to it's web shield soon

 

For those users of programs such as Spywareblaster which has the capability to add custom ActiveX kill-bits....they can add the below CLSID which will set the "killbit" for msdds.dll.

EC444CB6-3E7E-4865-B1C3-0DE72EF39B3F

As noted in the Sans article.... "Of course, this will break ActiveX applications which use msdds.dll legitimately. Use at your own risk, and let us know if you find any such ActiveX applications."

 

Bubba, does any of this affect usrs of Firefox, or does this just relate to IE or the Operating System in general?

Thanx T