Viruses/Worms News

Microsoft warns vulnerability being exploited in IE

Tuesday, July 7, 2009

A zero-day vulnerability in Microsoft Video ActiveX Control has been exploited in the wild, Microsoft warned on Monday. An attacker who successfully exploits this web security flaw could take control of a user's PC using a maliciously crafted website.

Users of Windows XP and Windows Server 2003 are vulnerable to the exploit when visiting malicious websites using Internet Explorer, Microsoft said in a security bulletin.

Compromised websites and sites that accept or host user-provided content or advertisements could contain malicious code to exploit this vulnerability.

Microsoft said cybercriminals could attempt to exploit the web security flaw by luring users to click a link in an email message or Instant Messenger message that takes users to the attacker's site.

Windows XP and Windows Server 2003 users should deactivate ActiveX Control within Internet Explorer, using the workaround listed on Microsoft's support site.

Although Windows Vista and Windows Server 2008 are unaffected by this vulnerability, Microsoft is recommending that customers remove support for ActiveX Control within Internet Explorer.

Users can also opt to have Microsoft automatically "Fix It For Me" at Knowledge Base article 972890 on the support site.ADNFCR-1765-ID-19253669-ADNFCR

Related News:

Researchers: Malware attackers reloading for Windows 7 assaults - 11.20.2009
A report issued yesterday by computer security firm Symantec says that hackers are undoubtedly reworking their malicious software to target Windows 7 as more users switch to the latest version of Microsoft's flagship OS.

Want to secure your iPhone against intruders? There's an app for that - 11.20.2009
Cisco Systems today released a free iPhone app that will allow users to receive security updates and the latest news on web threats, as well as aggregating additional security related content for iPhone users.

Microsoft says 64-bit versions of Windows are harder to infect - 11.19.2009
Members of Microsoft's security team write that 64-bit editions of Windows are much less susceptible to malware attacks, but outside experts caution that 64-bit malware could be the next big thing in cyber crime.

Google coming down hard on malicious advertisers - 11.18.2009
Search giant Google has said that it will lay down the law where scam artists and malvertisers are concerned: Permanent bans will be the result of any fraudulent activity on the company's AdWords service.

If at first you don't succeed: Most malware protection fails first round of certification testing - 11.17.2009
A study performed by security testing and research firm ICSA Labs says that almost four out of five computer security products fail their first certification tests and need to be retooled for a second and sometimes a third attempt.
View Related Resources
Or
Watch an Online Demo
Or
Have us call you now