MS11-090: Cumulative Security Update of ActiveX Kill Bits (2618451)
High Nessus Plugin ID 57276
SynopsisThe remote Windows host is missing an update that disables selected ActiveX controls.
DescriptionThe remote Windows host has one or more ActiveX controls installed that could be abused to execute arbitrary code remotely if a user can be tricked into viewing a malicious web page using Internet Explorer.
Three of these controls are from Microsoft itself while the others are from third-party vendors that have asked Microsoft to prevent their controls from being run in Internet Explorer.
SolutionMicrosoft has released a set of patches for Windows XP, 2003, Vista, 2008, 7, and 2008 R2.