itb-nz logo
Story image

Symantec leads Internet Explorer fight back

30 Apr 2014

In response to the latest Microsoft Internet Explorer Zero Day vulnerability, Symantec has provided a script to mitigate against the attacks, posting the tool on its blog for people to download.

"Microsoft is working on a patch, but it won’t be made available for XP users so the Symantec tool offers a workaround for those users," says an official release from the security experts.

"All versions of IE on all platforms are affected and users can be exploited by browsing to maliciously crafted web pages.

"It's being used in targeted attacks which either means a malicious link is being sent in spear phishing emails or they’re setting up watering hole sites."

In order to mitigate Microsoft Internet Explorer vulnerability, Symantec is providing the following recommendations.

Microsoft states that versions of the Enhanced Mitigation Experience Toolkit (EMET) 4.1 and above can mitigate this vulnerability in Internet Explorer. The toolkit is available for Windows XP users as well.

If using EMET is not an option, users can consider mitigating the issue by unregistering a DLL file named VGX.DLL. This file provides support for VML (Vector Markup Language) in the browser. This is not required by the majority of users.

However, by unregistering the library, any application that uses the DLL may no longer function properly. Also, some applications installed on the system may potentially re-register the DLL.

With this in mind, the following one line of instruction can be executed to make the system immune from attacks attempting to exploit the vulnerability. This line of instruction can be used for all affected operating systems:

"%SystemRoot%\System32\regsvr32.exe" -u "%CommonProgramFiles%\Microsoft Shared\VGX\vgx.dll"

We have developed a batch file that can be used to perform the task for those who may be required to administrate large IT infrastructures.

For more information visit the Symantec security blog by clicking here

Story image
BlackLine enhances support for finance and accounting teams
“The global pandemic is bringing to the forefront what we’ve seen for years.  Traditional manual accounting processes are not sustainable."More
Link image
On 10 December, find out how data centers will fare in the face of climate change
From pandemic disruption to the urgency to address climate change, data center development in Asia Pacific needs to remain resilient and sustainable. On 10 December, join this webinar to learn about viable solutions data center operators can use to overcome environmental challenges. Register now.More
Story image
Palo Alto Networks launches enterprise data loss prevention service
"As a single centralised cloud service, Palo Alto Networks Enterprise DLP can be deployed across an entire large enterprise in minutes with no need for additional infrastructure."More
Story image
COVID-19 creating increased global demand for NZ’s digital businesses
Activity is picking up for many Kiwi software and digital businesses as demand increases for digital and cloud-based service offerings.More
Story image
Organisations struggling to realise full business value from cloud investments
“Our study shows a surprisingly small two-year improvement in returns on corporate cloud initiatives, suggesting that a more thoughtful and holistic approach is needed to fully unlock the value of cloud.”More
Story image
Interview: Appian's Matt Calkins on low-code & the rise of hyperautomation
A lot can change in 21 years. It takes a strong company to remain true to a few key technology ideas, and concentrate on their evolution.More