Microsoft Warns of New Video ActiveX Vulnerability

Posted by Soulskill on Tuesday July 7, 2009 @01:34AM from the like-one-of-those-pothole-signs dept.

ucanlookitup writes "Microsoft has warned of a 'privately reported' vulnerability affecting IE users on XP or Windows Server 2003. The vulnerability allows remote users to execute arbitrary code with the same privileges as the users. The vulnerability is triggered when users visit a web site with malicious code. 'Security experts say criminals have been attacking the vulnerability for nearly a week. Thousands of sites have been hacked to serve up malicious software that exploits the vulnerability.' The advisory can be found at TechNet. Until Microsoft develops a patch, a workaround is available."

1 of 146 comments (clear)

Min score:

Reason:

Sort:

Funny but wrong by FranTaylor · 2009-07-07 02:04 · Score: -1, Redundant

"Funnily, this issue is exactly the same in Linux "
Funny, but the situation is not like that at all on Linux. On Linux, the browser runs inside SELinux and has ZERO ability to get at any kinds of administrative functionality.