New Zero-Day exploit

[smah]

Internet Explorer is subject to a new exploit that has not yet been patched. It is worth noting that Vista running IE in Protected Mode and Server 2003 in Enhanced Security Mode (both of which are default behavior) limit the impact of this vulnerablilty.

http://www.microsoft.com/technet/security/advisory/961051.mspx

http://blogs.techrepublic.com.com/networking/?p=760&tag=nl.e101

If you manage a firewall capable of blocking access to known expoited sites, here's a list to block

http://www.shadowserver.org/wiki/pmwiki.php?n=Calendar.20081210

 

[smah]

An out of band update is now available
thread779-1519744

 

[cmeagan656]

Thanks for posting the out-of-band update news in the IE forum. I was having problems posting the news item in more than one forum (I guess Tek-Tips has something in place to prevent duplicate posts to different forums). I managed to get it posted in the XP and Vista forums but couldn't get it posted in the IE or Server 2003 forums before I had to go out.

Cheers.