Glaswegian

Hackers are using a new multiple-attack package composed of seven ActiveX exploits, many of them never seen in the wild before, a security company has said.

Fewer than half of the flawed ActiveX controls have been patched.

The attack framework probes Windows PCs for vulnerable ActiveX controls from software vendors Microsoft, Citrix, and Macrovision, as well as hardware makers D-Link, HP, Gateway, and Sony, said a Symantec researcher.

"What's interesting about this attack is that there are so many vulnerabilities in one attack that have not been seen in the wild previously," said Symantec's Patrick Jungles, who wrote an analysis of the multi-strike package for customers of the company's DeepSight threat service.


http://www.techworld.com/security/ne...S&NewsID=11917