Run all software as a nonprivileged user with minimal access rights.
Execute all software as a user with minimal privileges. Software that may potentially handle malicious content should by insulated with additional precautions such as restrictive environments.
Do not follow links provided by unknown or untrusted sources.
Users should refrain from following links that originate from unknown or questionable sources.
Set web browser security to disable the execution of script code or active content.
It may be possible to prevent successful exploitation by disabling script code and active content support within the client browser. It should be noted that this mitigation tactic might adversely affect legitimate Web sites that rely on the execution of browser based script code.
Implement multiple redundant layers of security.
As it may be possible that this issue will be leveraged to execute code, memory protection schemes are recommended. Memory protection schemes such as non-executable stack/heap configurations and randomly mapped memory segments will complicate exploitation of memory corruption vulnerabilities.
Microsoft has released fixes for supported operating system versions. Fixes for Internet Explorer 5.5 SP 2 running on Windows ME and Internet Explorer 6 SP 1 running on Windows 98/98SE/ME can be obtained through the Microsoft Update Web site or the Windows Update Web site. Avaya has released advisory ASA-2005-234 detailing affected Avaya products. Please see the referenced advisory for further information.