Unpatched IE exploit, exploit code published

[PARUK]

Apologies if this is old news, but there's a pretty bad unpatched exploit in IE right now.

http://www.microsoft.com/technet/security/advisory/925568.mspx

The easiest temporary workaround seems to be to disable VML:

regsvr32 -u "%ProgramFiles%\Common Files\Microsoft Shared\VGX\vgx.dll"
then restart

... and re-enable once the patch has been released:
regsvr32 "%ProgramFiles%\Common Files\Microsoft Shared\VGX\vgx.dll”

 

[Steve09]

Thanks Pal