Wednesday, September 27, 2006 4:51 PM
cmosby
US-CERT Current Activity - Public Exploit Code for Microsoft WebViewFolderIcon ActiveX Control Vulnerability
Public Exploit Code for Microsoft WebViewFolderIcon ActiveX Control Vulnerability
added September 27, 2006
We are aware of publicly available exploit code for a new, unpatched vulnerability in Microsoft Internet Explorer. The exploit code targets a vulnerability in the Microsoft WebViewFolderIcon ActiveX control.
More information about this vulnerability can be found in the following:
- Vulnerability Note VU#753044 - Microsoft Windows WebViewFolderIcon ActiveX integer overflow
Until an update, patch, or more information becomes available, we strongly recommend the following:
We will continue to monitor this issue and provide additional information as it becomes available.
http://www.us-cert.gov/current/
Filed under: Security and Anti-Virus, Browser Wars, Internet Explorer