Microsoft has issued a one-click security workaround for Internet Explorer as a stopgap measure until the company releases a full security update for its Web browser on Friday. The new “Fix it” solution helps protect users of Internet Explorer 6, 7, 8, and 9 from a recently disclosed memory corruption issue that several security experts have seen in active use. The vulnerabilities could allow a hacker to gain remote access to your system with the same user privileges as you including the ability to install or remove programs, modify files, and create new user accounts.
The latest Internet Explorer vulnerability is considered a critical threat. The seriousness of the issue prompted the German government on Tuesday to urge users to give up using IE until Microsoft released a security patch for the vulnerability.
Microsoft says it hopes to release Friday's security update for IE as close as possible to 10 a.m. Pacific. You will be able to get the patch via Windows Update. If you have automatic updates enabled, you shouldn't have to take any action to get the security fix. Microsoft also said Friday's update will include more fixes in addition to the memory corruption issue.
http://www.pcworld.com/article/2010...ulnerability-permanent-fix-coming-friday.html
Looks like they are Fixing Oracles Java problem at least this one for them
as it applies to IE anyway. It will be interesting to see what independent testing reveals.