----- Original Message -----
From: "Andy Medina"
Workarounds/mitigation:
Microsoft has posted this and suggests that turning off Active
Scripting will prevent this exploit from working. You could,
of course, always use another browser like Firefox or Opera,
but remember that IE is so closely tied to other parts of the
OS, that you may be running it in places where you don't
realize you are.
One of our readers asked whether DropMyRights from Microsoft
would provide any protection. We haven't had an opportunity to
test that out.
I run DropMyRights full time, and also get prompts for Active
Scripting all the time, so I "could" approve them, but they would
run as a non-admin user with normal rights. (Not even a limited user.)
FWIW, DropMyRights has several modes, so THAT needs to be
addressed as part of any discussion of the problem or solution also...
Rick Glazier
--
No virus found in this outgoing message.
Checked by AVG Free Edition.
Version: 7.1.385 / Virus Database: 268.3.0/290 - Release Date: 3/23/2006
--
----------------------------------------
To Change your email Address for this list, send the following message:
CHANGE WIN-HOME your_old_address your_new_address
to: [EMAIL PROTECTED]
Note carefully that both old and new addresses are required.