FAQ: What you should know now about the latest IE bug

20.09.2006

regsvr32 -u "%ProgramFiles%\CommonFiles\Microsoft Shared\VGX\vgx.dll"

After the DLL is unregistered, reboot the computer. Once a patch is available, the DLL may be re-registered at your convenience. Security expert Jesper Johansson has posted some useful templates, using Group Policy, for fast fix deployment in Windows domains.

Microsoft says that Windows Live OneCare users who currently have green status are protected from all known malware, and recommends that all users check that their antivirus protections are up to date. Antivirus software that includes protection against buffer overflows appears to protect against the exploit.

If vgx.dll is crucial to your users, the Access Control List for the DLL may be modified to forbid access to the 'everyone' group.

Microsoft suggests those using IE 6 for XP Service Pack 2 can protect themselves by disabling binary and script behaviors in the Internet and Local Internet security zones. Those setting are reached through the Tools --> Internet Options -- > Security --> (zone) --> Active X controls and plug-ins for both zones.