Skip Navigation

Connectivity

Technology News Without the Geek-Speak

07/08/2009

ALERT- ***MS Internet Explorer Security Alert***

Vulnerability in Microsoft Video ActiveX Control Could Allow
Remote Code Execution

From Microsoft Security Advisory (972890)

"Microsoft is investigating a privately reported vulnerability in Microsoft Video ActiveX Control. An attacker who successfully exploited this vulnerability could gain the same user rights as the local user. When using Internet Explorer, code execution is remote and may not require any user intervention.."

 

Affected Software

Windows XP Service Pack 2 and Windows XP Service Pack 3

Windows XP Professional x64 Edition Service Pack 2

Windows Server 2003 Service Pack 2

Windows Server 2003 x64 Edition Service Pack 2

Windows Server 2003 with SP2 for Itanium-based Systems

 

In this case, computers become compromised by visiting infected websites allowing criminals to steal computer passwords and install secret "backdoor" access. UNL Information Services wants you to be aware of the possibility that your computer could become compromised via this vulnerability.

Consider downloading and using an alternative web browser like Firefox-particularly for random web browsing until a software patch is developed by Microsoft. Please keep Windows updated.

Download Firefox

 

Bookmarks from IE can be imported into Firefox. If you have Firefox installed, click File/Import.../Import Settings and Data/Microsoft Internet Explorer


 

 

 

 

Back to Connectivity

Connectivity is a publication of UNL Information Services
210x210

 

Microsoft Fix it Workaround

This is a temporary measure that will disable Active X control


(Consult your local computer support tech)

SANS Storm Center

 

 

Please consult with your local technical personnel.

For additional questions, contact the
Computer Help Center

 

Link to the AP News Story