Geekzone: technology news, blogs, forums
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.
Microsoft Video ActiveX Control Zero-Day exploit: CCIP says take action immediately to mitigate vulnerability
Posted on 8-Jul-2009 09:02 by Juha. | Tags Filed under: News.

The New Zealand government Centre for Critical Infrastructyre Protection would like to bring people's attention to the Microsoft Security Advisory 972890 that was released July7.

Microsoft have announced a vulnerability in Microsoft Video ActiveX Control that allows remote code execution. This is reported to affect versions of Windows XP and Window Server 2003.

CCIP is bringing this to your attention as this vulnerability has been reported as being actively exploited in the wild.


Administrators are advised to take the following mitigation steps immediately.

There is currently no patch to correct this issue. However you can set the kill-bit to mitigate this vulnerability.

Microsoft have provided a way to automatically implement the workaround by following the instructions under "Fix It For Me" in the following Knowledge Base article:

Alternatively the following quoted text can be included in a .REG file and imported into your registry.

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX
"Compatibility Flags"=dword:00000400

Please note that in addition to the class identifier listed in the above example there is a full list of class identifiers in the
Suggested Actions-->Workarounds section of the Microsoft Advisory:

It is recommended that all of them are implemented.

There is also a writeup on Microsoft's Security Response Centre Blog.

comments powered by Disqus

Trending now »

Hot discussions in our forums right now:

Rise of the machines
Created by Rikkitic, last reply by BarTender on 23-Oct-2016 20:20 (16 replies)
Pages... 2

Sony XZ Owners discussion
Created by networkn, last reply by Geektastic on 23-Oct-2016 17:19 (101 replies)
Pages... 5 6 7

Gigabit cable now available
Created by sub, last reply by Pumpedd on 23-Oct-2016 10:48 (59 replies)
Pages... 2 3 4

Who is this women? She is possibly the most famous women on the internet and nobody knows who she is.
Created by jimbob79, last reply by cynnicallemon on 20-Oct-2016 13:28 (14 replies)

Labour weekend plans?
Created by DarthKermit, last reply by joker97 on 22-Oct-2016 09:51 (27 replies)
Pages... 2

Is windows 10 anniversary update causing you problems
Created by robjg63, last reply by mdav056 on 20-Oct-2016 14:01 (27 replies)
Pages... 2

Windows 10: HDMI or DP to connect to 4K monitor?
Created by joker97, last reply by joker97 on 23-Oct-2016 19:04 (12 replies)

Does anyone use Ebay?
Created by TeaLeaf, last reply by tchart on 23-Oct-2016 19:36 (23 replies)
Pages... 2