CRITICAL: Vulnerability in ActiveX Control (IE5.01 SP4, IE6, IE6 SP1)

Zazula · 09-15-2006, 05:33 AM

A newly discovered vulnerability in the Microsoft DirectAnimation Path ActiveX control, which is included in Daxctle.ocx, calls for users to perform interim workarounds until a Security Update is issued.

Microsoft Security Advisory (925444)

1. Prevent the Microsoft DirectAnimation Path ActiveX control from running in Internet Explorer
2. Configure Internet Explorer to prompt before running Active Scripting or disable Active Scripting in the Internet and Local intranet security zone.
3. Configure Internet Explorer to prompt before running ActiveX Controls or disable ActiveX Controls in the Internet and Local intranet security zone.
4. Set Internet and Local intranet security zone settings to “High” to prompt before running ActiveX Controls and Active Scripting in these zones.
5. Modify the Access Control List on Daxctle.ocx to be more restrictive.

To find out how the aforementioned workarounds are performed, please read the MS Advisory linked above.

**Cellus** · 09-15-2006, 12:03 PM

Link is broken due to a missing character. Here's the actual link:

http://www.microsoft.com/technet/sec...ry/925444.mspx

Here's also a link to a news article regarding this vulnerability:

http://www.securityfocus.com/brief/304

Zazula · 09-15-2006, 01:08 PM

Thanks, Cellus, for taking care.

**RavenMind** · 09-22-2006, 03:14 PM

Yet another reason to stop using Internet Explorer.

(I know, I know.. as if we needed more..)

09-15-2006, 05:33 AM	#1 (permalink)
Zazula Manager Emeritus, I'm blond, James Blond Join Date: Apr 2006 Location: Athens, Greece Posts: 7,643 OS: Win XP Pro SP2	CRITICAL: Vulnerability in ActiveX Control (IE5.01 SP4, IE6, IE6 SP1) A newly discovered vulnerability in the Microsoft DirectAnimation Path ActiveX control, which is included in Daxctle.ocx, calls for users to perform interim workarounds until a Security Update is issued. Microsoft Security Advisory (925444) 1. Prevent the Microsoft DirectAnimation Path ActiveX control from running in Internet Explorer 2. Configure Internet Explorer to prompt before running Active Scripting or disable Active Scripting in the Internet and Local intranet security zone. 3. Configure Internet Explorer to prompt before running ActiveX Controls or disable ActiveX Controls in the Internet and Local intranet security zone. 4. Set Internet and Local intranet security zone settings to “High” to prompt before running ActiveX Controls and Active Scripting in these zones. 5. Modify the Access Control List on Daxctle.ocx to be more restrictive. To find out how the aforementioned workarounds are performed, please read the MS Advisory linked above. __________________ "Time is the wisest because it discovers everything" Thales of Miletus (ca.624BC-ca.546BC) "Everything flows, nothing stands still." Heraclitus of Ephesus (ca.535BC-475BC) "One thing I know, that I know nothing" Socrates of Athens (ca.470BC–399BC)

09-15-2006, 12:03 PM	#2 (permalink)
Cellus Moderator Networking Team Join Date: Aug 2006 Location: Canada Posts: 2,633 OS: Windows Vista Business SP1, Windows XP Professional SP3 My System	Link is broken due to a missing character. Here's the actual link: http://www.microsoft.com/technet/sec...ry/925444.mspx Here's also a link to a news article regarding this vulnerability: http://www.securityfocus.com/brief/304 __________________ TSF Networking Team HijackThis 5 Step Process Donate! Last edited by Cellus : 09-15-2006 at 12:06 PM.

09-15-2006, 01:08 PM	#3 (permalink)
Zazula Manager Emeritus, I'm blond, James Blond Join Date: Apr 2006 Location: Athens, Greece Posts: 7,643 OS: Win XP Pro SP2	Thanks, Cellus, for taking care. __________________ "Time is the wisest because it discovers everything" Thales of Miletus (ca.624BC-ca.546BC) "Everything flows, nothing stands still." Heraclitus of Ephesus (ca.535BC-475BC) "One thing I know, that I know nothing" Socrates of Athens (ca.470BC–399BC)

09-22-2006, 03:14 PM	#4 (permalink)
RavenMind I helped the forums. Join Date: Mar 2005 Location: Salt Lake Posts: 1,008 OS: WinXP SP2	Yet another reason to stop using Internet Explorer. (I know, I know.. as if we needed more..) __________________ ========================================== If TSF has helped you, please consider making a donation to help keep the board running.