Legit News
Microsoft Admits Security Flaw in Video ActiveX Control
Microsoft is investigating a privately reported vulnerability in Microsoft Video ActiveX Control. An attacker who successfully exploited this vulnerability could gain the same user rights as the local user. When using Internet Explorer, code execution is remote and may not require any user intervention. You can read more about the workaround here.
Our investigation has shown that there are no by-design uses for this ActiveX Control in Internet Explorer which includes all of the Class Identifiers within the msvidctl.dll that hosts this ActiveX Control. For Windows XP and Windows Server 2003 customers, Microsoft is recommending removing support for this ActiveX Control within Internet Explorer using all the Class Identifiers listed in the Workaround section. Though unaffected by this vulnerability, Microsoft is recommending that Windows Vista and Windows Server 2008 customers remove support for this ActiveX Control within Internet Explorer using the same Class Identifiers as a defense-in-depth measure.
Posted by | Tue, Jul 07, 2009 - 09:27 AM
Search
Hot Topics
- PCI Express Bus Speed?
- Should i get the hd4850 or hd4890?
- Fraps 3.0.0 Released!
- Used computer part required: London Taxi Company
- ATI 4650 problems using XP Pro on Windows 7 machine
- DELL ANNOUNCES ADAMO XPS Laptop
- Firefox v3.5.5 Released!
- Help, need Server value!
- Where Are The Radeon HD 5800 Series Video Cards?
- Hello Humans: DROID by Motorola Arrives