Microsoft ActiveX Flaw give attacker full control

Microsoft said in a security advisory Monday thatserious computer security hole in its Video ActiveX Control could allow remote code execution through Internet Explorer that gives same rights as the local user if successfully exploited.

The firm is now investigating the vulnerabilities and said that they "are aware of attacks attempting to exploit the vulnerability"

"Our investigation has shown that there are no by-design uses for this ActiveX Control in Internet Explorer which includes all of the Class Identifiers within the msvidctl.dll that hosts this ActiveX Control," Microsoft said in its advisory.

Microsoft is recommending removing support for ActiveX Control within Internet Explorer.

Windows Vista and Windows Server 2008 are not affected of the Video ActiveX Control vulnerabilities because the OS restrict data flowing to ActiveX within IE.