Microsoft has just released an update to address the VML (VGX) issue
The update can currently be found on Microsoft Update and is titled
Security Update for Windows XP (KB925486)
This URL should point to the right place: http://go.microsoft.com/fwlink/?LinkID=73174 (not live as of 1:38PM EST)
It is recommended that the patch be applied immediately (after testing) unless a suitable mitigation strategy is in place.
Thanks to everyone that submitted analysis, news, samples, malicious website reports, etc
Sep 26th 2006
1 decade ago