Just to make sure you have seen that: We just released a blog Security Advisory 979352 – Going out of Band
Quoting the blog:
Based on our comprehensive monitoring of the threat landscape we continue to see very limited, and in some cases, targeted attacks. To date, the only successful attacks that we are aware of have been against Internet Explorer 6.
Given the significant level of attention this issue has generated, confusion about what customers can do to protect themselves and the escalating threat environment Microsoft will release a security update out-of-band for this vulnerability.
The release-time will be communicated tomorrow.
So, from my point of view, you should do two things now:
- Deploy the Security Update as soon as it is out
- Upgrade to Internet Explorer 8 if you have not done so yet