Monday, July 6, 2009

Microsoft DirectShow Zero day

This is serious and is ITW. 

Killbit:



Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerActiveX Compatibility{0955AC62-BF2E-4CBA-A2B9-A63F772D46CF}]
"Compatibility Flags"=dword:00000400 


More at SANS here, plus CSIS writeup here (if you don’t “taler Dansk”, then use this Google Translate link).


Best solution?  Don’t use IE for now. 


Alex Eckelberry

Update:  Microsoft info here.

No comments:

Post a Comment