me said:
Count yourself lucky. This week's update fiasco should convince
anyone that Auto Updates should be turned off. Wait until all the
know issues witht he patch are cleared up until you install them.
I've been saying this for a couple of years now, but too many others keep
preaching that updates need to be installed as soon as they come out, no
matter if they apply to you or not.
Alittle info on KB908531 that has been causing hovic, it really doesn't
need to be installed unless a person is easliy gullible.
Firewall best practices and standard default firewall configurations can
help protect networks from attacks that originate outside the enterprise
perimeter. Best practices recommend that systems that are connected to the
Internet have a minimal number of ports exposed.
In a Web-based attack scenario, an attacker would have to host a Web site
that contains a Web page that is used to exploit this vulnerability. An
attacker would have no way to force users to visit a malicious Web site.
Instead, an attacker would have to persuade them to visit the Web site,
typically by getting them to click a link that takes them to the attacker's
Web site. After they click the link, they would be prompted to perform
several actions. An attack could only occur after they performed these
actions.
The vulnerability could not be exploited automatically through e-mail. For
an attack to be successful a user must open an attachment or click on a link
that is sent in an e-mail message.
