Microsoft acknowledges a bug in Windows’ MIME HTML protocol handler can be used by attackers to run malicious scripts. The vulnerability went public last week when the Chinese Web site WooYun.org published proof-of-concept code. Microsoft recommends users lock down the MHTML protocol handler by running a “Fixit” tool it’s made available. All supported versions of Windows, including Windows XP, Vista and Windows 7, contain the flawed protocol handler. Microsoft says it’s working on a “very very closely” update to address the flaw.”]
Source: https://www.csoonline.com/article/2126848/microsoft-warns-of-new-windows-zero-day-bug.html