[ad#Google 300 X 250]

The exploit can hijack a computer remotely if the victim simply visits a compromised web site. The attack allows hackers to exploit a hole into the victims computer through Microsoft’s Video ActiveX Control.

The “zero day” vulnerability affects only Internet Explorer users via compromised web sites through part of its software used to play videos. The exploit can only attack users running Windows XP and Windows Server 2003 using the msvidctl.dll file that hosts this ActiveX Control. Microsoft recommends removing support for this ActiveX Control within Internet Explorer.

A patch for the exploit could take months to ready, so for now a temporary work around has been posted on Microsoft’s support web site under the “Fix it” feature. Users can enable or disable the work around through Microsoft’s web site.

Microsoft warns Windows XP and Windows Server 2003 users to enable the temporary workaround for now and also advises Windows Vista and Windows Server 2008 users to take these steps as a precaution. Internet Explorer 6 and 7 users are at risk but not Internet Explorer 8 users.

[ad#Google 250 X 250]

Related posts:

1. Microsoft to patch 17-year-old computer bug
2. Security Flaw in Windows 7 and Vista could not allow remote reboot
3. Homing Pigeon Faster Than Internet? In S. Africa, Yes
4. Microsoft’s Office 2010 Technical Preview program is Ending
5. Windows 7 Launched in Pakistan