Secunia

A vulnerability has been reported in Microsoft Visual Studio, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to an unspecified error in the validation of controls instantiated by WMI Object Broker ActiveX control (WmiScriptUtils.dll).

Successful exploitation allows execution of arbitrary code when a user e.g. visits a malicious website using Internet Explorer.

NOTE: The vulnerability is already being actively exploited.

Solution
Apply patch.
Further details available in Customer Area

Provided and/or discovered by
Discovered as a 0-day.
Sample exploit provided by Michal Bucko (sapheal), hack.pl.

Also discovered by an anonymous person and reported via ZDI.

Changelog
Further details available in Customer Area

Original Advisory
MS06-073 (KB925674):
http://www.microsoft.com/technet/security/Bulletin/MS06-073.mspx

Microsoft:
http://www.microsoft.com/technet/security/advisory/927709.mspx

ZDI:
http://www.zerodayinitiative.com/advisories/ZDI-06-047.html

Other references
Further details available in Customer Area

Alternate/detailed remediation
Further details available in Customer Area

Deep Links
Links available in Customer Area