Disabling ActiveX controls in the Internet Zone (or any zone used by an attacker) appears to prevent exploitation of this vulnerability
In fact, disabling ActiveX pretty much turns IE into a safe browser.