No patch yet? FIX it!

Hey guys,

Read an article about some code in IE being exploited and no patch.

Here is one of these "Fix it " things.

http://support.microsoft.com/kb/972890#FixItForMe

Patch!

Original Article

http://www.news24.com/Content/SciTec..._security_hole

Thanks for the QuickFix links Cider,

This is strange as MS say:

Our investigation has shown that there are no by-design uses for this ActiveX Control in Internet Explorer which includes all of the Class Identifiers within the msvidctl.dll that hosts this ActiveX Control.

So why is it there then?

I think that it is rather scary that malware authors could actually find and create a use for something that MS don't even know what to do with :shocked:

I also noticed that Windows 2000 doesn't have a problem with it so I am guessing that it isn't used by IE6

We can merge my thread and this I guess..

This is use of Directshow vulnerability

http://antionline.com/showthread.php?t=278323

Secunia is having more information about it now :

http://secunia.com/advisories/35683/


Plus we can put this as an *HEADS UP* .. This is critical and is being actively exploited..