Microsoft Security Response Center: Security Advisory 979352 – Going out of Band
“To date, the only successful attacks that we are aware of have been against Internet Explorer 6. …Given the significant level of attention this issue has generated, confusion about what customers can do to protect themselves and the escalating threat environment Microsoft will release a security update out-of-band for this vulnerability.”
What MSRC isn’t saying (no idea why) is that this fix is for the exploit that researchers are calling “Aurora.”


