Microsoft warns of security flaw in IE

Advises users to deactivate ActiveX video control

Microsoft has warned about security vulnerability in its Internet Explorer, which could allow hackers to access the user’s system remotely.

The security flaw was found in the ActiveX video control that is used in the browser to play video on computers running with Windows XP or Windows Server 2003 operating systems.

Microsoft said in a security advisory online, “An attacker who successfully exploited this vulnerability could gain the same user rights as the local user. We are aware of attacks attempting to exploit the vulnerability.”

The company stated further that it is currently working to develop a security update for Windows to fix the vulnerability and also advised users to deactivate ActiveX video control until the problem is resolved.

The company also noted that customers who are using Windows Vista or Windows Server 2008 are not affected since the ability to pass data to this control within Internet Explorer has been restricted.

The attackers can take advantage of the vulnerability by persuading the internet users to visit the web site by getting them click a link in an e-mail message or instant messenger message, which will then take the users to the website that already contains malicious code.

• Share:
• 
• 
• 
• 
• 
• 
• 
• 
•