New ActiveX flaw discovered

There's a new concern about Microsoft's ActiveX control, as a security flaw could allow hackers to gain remote control of a PC. According to a Microsoft advisory report late last week, the flaw allows for limited attacks, though one security vendor claims that the issue is critical. The attack occurs when a user is led to a malicious site and the flaw only exists in certain, patched versions of Windows running Microsoft XML Core Services 4.0. The affected versions are Windows 2000 Service Pack 4 and Windows XP Service Pack 2.

For more on the ActiveX issue:
- check out the blog post at CSO online