Fergie's Tech Blog

Security Flap Over Support ActiveX Controls Bug

John Leyden writes on The Register:

Flaws in an ActiveX component incorporated in many technical support support packages create a risk of hacking attacks, security watchers warn.

SupportSoft's ActiveX controls are subject to multiple buffer overflow vulnerabilities, which create a means for hackers to inject malware onto vulnerable systems. The controls are used by internet service providers (ISPs) and PC manufacturers for remote assistance and other technical support functions, creating a large pool of potentially vulnerable users. Exploitation would involve tricking users into visiting maliciously constructed websites featuring ActiveX controls that take advantage of SupportSoft's vulnerabilities.

posted by Fergie @ 2/27/2007 01:42:00 PM