Black Raven Dragoons

[Zancarius]

This Slashdot article says it all:

http://it.slashdot.org/article.pl?sid=08/12/10/206216

Unfortunately, it doesn't look as if there are any fixes in the works. One of the exploits involves the XML parser used by MSIE and another is an exploit in the "WordPad Text Converter" (honestly, HOW?). I'll post updates as fixes become available. For now, browse safely.

Edit: Changing to sticky for now.

[Zancarius]

Looks like Microsoft released four patches yesterday to address flaws in MSIE, WinXP, and a few flaws in Windows Media Player that may affect all versions of Windows:

http://www.microsoft.com/technet/security/bulletin/ms08-073.mspx
http://www.microsoft.com/technet/security/bulletin/ms08-076.mspx
http://www.microsoft.com/technet/security/Bulletin/ms08-071.mspx
http://www.microsoft.com/technet/security/bulletin/ms08-076.mspx

Be sure to run Windows Update if you're using Windows, particularly in this Age of Account Compromises.

[Zancarius]

Bump. A critical MSIE 7 patch was released today addressing the zero day exploit mentioned a couple of times here. Make sure to run Windows Update if you're using XP, Vista, or any other derivative in between.