Microsoft Vulnerability Targeted in New Drive-by Attack
Hackers are launching attacks against an unpatched vulnerability in the Microsoft Video ActiveX Control that could allow an attacker to take full control over the system. When using Internet Explorer, code execution is remote and requires no user interaction, Microsoft says.Microsoft is investigating attacks targeting a vulnerability in Microsoft Video ActiveX Control that could allow a hacker to gain complete control of a system. Not much has been said about the exact nature of the Microsoft Video ActiveX Control vulnerability, which is so far reported to affect Windows XP and Windows Server 2003. If the vulnerability is successfully exploited, the attacker could gain the same user rights as the local user. When using Internet Explorer, code execution is remote and may not require any user intervention, Microsoft warned.
The ActiveX control involved is used to connect Microsoft DirectShow filters for use in capturing, recording and playing video. It is also the primary component Microsoft Windows Media Center uses to build filter graphs for recording and playing television video.