The company said that it had received reports of a limited number of targeted attacks on a flaw in ActiveX control for Snapshot Viewer, a browser plug-in for Microsoft Office Access 2000, 2002 and 2003.
The vulnerable control is not present in Office Access 2007.
If exploited, the vulnerability could be used by attacker to gain control over the targeted system with the rights of the current user.
ActiveX controls are used by Internet Explorer to connect with other applications and view content within the browser. Other browsers do not use the ActiveX controls and are not vulnerable to the attack.
Microsoft noted that copies of Internet Explorer which run in the Enhanced Security Configuration, such as those in Windows Server 2003 and 2008, will also be protected from the attack.
News of the attacks comes just one day before Microsoft is set to issue a monthly security release which for the first time in more than three years does not include a bulletin of 'critical' severity.
Microsoft warns of new attacks
By
Shaun Nichols
on
Jul 8, 2008 4:20PM
Microsoft is warning users of a newly reported attack on one of its ActiveX browser components..
Got a news tip for our journalists? Share it with us anonymously here.
Partner Content
Promoted Content
Winning strategies for complaints and disputes management in financial services
Promoted Content
Security "mindset shift" needed to protect organisations
Promoted Content
Why rethinking your CMS is crucial for customer retention
Promoted Content
How to turn digital complexity into competitive advantage
Sponsored Whitepapers
Free eBook: Digital Transformation 101 – for banks
Why financial services need to tackle their Middle Office
Learn: The latest way to transfer files between customers
Extracting the value of data using Unified Observability
Planning before the breach: You can’t protect what you can’t see
.png&h=146&w=240&c=1&s=0)
