Another Internet Explorer vulnerability confirmed by Microsoft

[Bastieeeh]

This time specially prepared animated cursors embedded into e-mails or websites give offenders the ability to execute any code. This issue applies to the Internet Explorer 6 and 7 using Windows 2000 SP4, XP SP2, XP Professional x64, XP 64-Bit for Itanium, 2003 (regardless the SP), 2003 x64 and Vista.
Microsoft responded to this and until they release the corresponding security update suggest this workaround:

As a best practice, users should always exercise extreme caution when opening or viewing unsolicited emails and email attachments from both known and unknown sources.

Heise Security reports that the Security Service Provider Determina told Microsoft about this exposure last year in December already.

View at TechPowerUp Main Site

 

[zekrahminator]

I remember this one time that Microsoft said something along the lines of "use Firefox" when faced with one of these problems .

 

[Bastieeeh]

Firefox isn't safe either! Under special circumstances it uses the Windows-embedded routines to display animated cursors and if so you are screwed as well!

 

[ex_reven]

safe-er

 

[Ketxxx]

hahaha. Another reason IE should just die.

 

[WarEagleAU]

Get a firewall program folks, hardware firewall or not, Zonealarm or something of the like is highly recommended. Then, you can avoid this stuff. I love my Zonealarm security suite.

 

[Deleted member 3]

hahaha. Another reason IE should just die.

Great constructive reply.