IE 7 0-day XML exploit

[Scrobbs]

Just a warning to those who use IE7 with XP SP3 and Vista (and most other MS OSs tbh). There's a new exploit out (yesterday) which is mainly used as a game password stealer.

Risk is mitigated by not allowing ActiveX controls and Active scripting to run automatically, or enabling memory protection within IE.

http://www.microsoft.com/technet/security/advisory/961051.mspx

The patch released yesterday does not fix this.

[elmuerte]

so... don't use IE7 until the next patch round of Microsoft? (which is early next year).

[ThunderPeel2001]

Thanks for the heads up