Well Dch48,
Well the sound policy is always, if there is a security hole apply the MS fix, NEVER go for a third party solution (MS and I advise you not to do that, and they know their backyard best), if the official update patch comes before applying the patch you should undo the temporal fix. If you haven't applied any MS fix then do nothing, just update and voila. As they see that more and more malcreants are abusing the "shortcut" vulnerability they apparently decided to come up with an out of band solution for the problem coming Monday - you can enable HCP if you need this, if you do not need a service do not install, the lesser services you have installed the smaller the vulnerability surface, it is a good security measure. Some do not need Java, do not install, some install VLC Media Player, they do not need other Media players, so also be lean on plug-ins, just take aboard that what is essential for your private computer experience,
polonus