Microsoft Security Advisory (2219475)

what a stupid thing to do and endanger XP users. Scoring points while being detrimental to public at large.

 

Sanctioned by Google? I wonder. They are starting to jab at each other more and more.

 

Well done Google...

 

If I was getting sick of these Help and Support Center vulnerabilities from cropping up every year or two, would it be sufficient to just disable the Help and Support Service itself for good? I don't think I've ever used it anyway.

 

The MS Fix It solution as detailed earlier in the thread by Ron is here
http://support.microsoft.com/kb/2219475

 

Same | similar at The Register JR !

Nasty stuff, expect an out-of-cycle KB fix from MS on this one.

There is some interesting reading at above link.

Thanks !

 

Mitigating Factors

• The vulnerability cannot be exploited automatically through e-mail. For an attack to be successful a user must click a link listed within an e-mail message.
  
• An attacker who successfully exploited this vulnerability could gain the same user rights as the local user. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.

It seems drive-by infections are probably the biggest concern, although running limited should help a great deal.

 

Very easily applied fix, indeed.
I applied the MS Fix It solution, though I had to drop my browser's Run Safer setting in OA in order to grant myself admin rights to apply it.
I appreciate this thread and the useful info. Thanks, fellas.