ActiveX Vulnerabilities – Threat To Web Security

This blog post explains the growing threat posed by vulnerable ActiveX controls in Internet Explorer — detailing how publicly available proof-of-concept code, heap-spray techniques, and exploit kits (e.g., Mpack, Neosploit) enable remote code execution and malware installation, cites MS08-041 as an example, and recommends setting a Kill-Bit as a mitigation when patches or signatures are not available.