Exodus Intelligence has developed a bypass for the Fix It that Microsoft released as a temporary mitigation. Microsoft said the impact of the attacks is limited; IE 9 and 10 are not vulnerable, Microsoft said. The exploit beat a fully patched Windows system running IE 8, the same version of the browser exploited by malware used in watering hole attacks against a number of political and manufacturing websites, including the Council on Foreign Relations in the U.S., and Chinese human rights site Uygur Haber Ajanski.
Source: https://threatpost.com/researchers-bypass-microsoft-fix-it-ie-zero-day-010413/77368/

