More information is available via Microsoft Security Advisory #927892 "Vulnerability in Microsoft XML Core Services Could Allow Remote Code Execution" http://www.microsoft.com/technet/security/advisory/927892.mspx
"Microsoft XMLHTTP ActiveX Control Code Execution Vulnerability" http://secunia.com/advisories/22687/ and "ActiveX - reason of the newest Windows 0-day, again" http://blogs.securiteam.com/?p=717 This code execution vulnerability is target of active exploitation already. - Juha-Matti _______________________________________________ Fun and Misc security discussion for OT posts. https://linuxbox.org/cgi-bin/mailman/listinfo/funsec Note: funsec is a public and open mailing list.
