Microsoft Reverses Decision and Releases VML Rendering Patch Today

About 5 minutes ago, my automatic updating function in Windows XP notified me that I had received a new update to install. The update, KB925486, is designed to address “A security issue…that could allow an attacker to compromise a computer running Microsoft Windows and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.”

Previously Microsoft had stated in an interview with ZDNet that they would release an update for this issue in October on the scheduled “Patch Tuesday.” After their statement, many pornographic websites began using the exploit to take control of visitors’ computers. There was also an indication that some other types of websites have begun using it as well.

To meet the demand for some type of work around or patch, many security companies – including Schrock Innovations – released non-Microsoft patches or workarounds that protected users against this new exploit that had the capability to cut through many firewall and antivirus software programs with ease.

It is unclear why Microsoft decided to release this update ahead of schedule, however I recommend that all Windows users immediately install this patch. If your auto-updating is enabled you should automatically receive the patch. If you do not use automatic updating, you should visit the Windows Update website as soon as possible to download and install the patch.

In a previous post, we offered you a utility that disabled your VML rendering as a work around to protect your computer. Once you have this patch installed you may run our utility again to re-enable your VML rendering.

For more information about this patch visit http://go.microsoft.com/fwlink/?LinkID=73174