There's an unsupported third party patch for the VML vulnerability available at ZERT.
We haven't tested it, so we can't recommend it.

But it's good to know something is available if this VML thingy really gets out of hand (which it hasn't yet).

Updated to add: Your mileage may vary - this patch might not work with everyone. See discussion at PC Doctor Guides.