VML Exploit: InfoCon at Yellow

SANS ISC has raised the InfoCon to yellow due to increasing exploitation of the MSIE VML vulnerability I wrote about yesterday. Now is the time to impliment countermeasures. One that I haven't seen other places is that the generic buffer overflow protection in McAfee AntiVirus 8.0i appears to prevent successful exploitation. It is likely that other products that provide similar HIPS functionality also will work.

Be safe out there.