New ActiveX problem in Internet Explorer

A security hole in an ActiveX component of Internet Explorer is being attacked with drive-by downloads. As far as I can tell, it is Windows XP that is affected. ZDNet reports:

Malicious hackers are launching code execution exploits against new, unpatched vulnerability in the Microsoft Video ActiveX Control, the company warned in an advisory.

The attacks are currently targeting users of Microsoft’s Internet Explorer browser. “An attacker who successfully exploited this vulnerability could gain the same user rights as the local user. When using Internet Explorer, code execution is remote and may not require any user intervention,” Microsoft said.

My usual advice holds. Disable ActiveX support for the Internet security zone or use Firefox.

Share this post:
  • Digg
  • del.icio.us
  • Facebook
  • StumbleUpon
  • Reddit

Did you enjoy this post? Why not leave a comment below and continue the conversation, or subscribe to my feed and get articles like this delivered automatically to your feed reader.

Comments

No comments yet.

Sorry, the comment form is closed at this time.