Tuesday, July 7, 2009

Microsoft Warns of Active-X 0-Day

A vulnerability is currently being exploited in Windows 2003 Server and Windows XP via a Video Active-X control. The vulnerability can be exploited by duping a user into downloading the control via a malicious web site using Internet Explorer.

Microsoft has released a web-based script that will turn off the affected control and also allow you to turn it on again when needed – click here. Also, for more technical information, click here.