Scott Gu has made a new blog post that discusses an additional level of protection that can be achieved via the use of UrlScan.

http://weblogs.asp.net/scottgu/archive/2010/09/24/update-on-asp-net-vulnerability.aspx

Please be sure to read and implement this new recommendation.