Microsoft: Officeactivex control Serious vulnerability

July 14, Microsoft issued a warning in Monday that the attackers were exploiting a serious ActiveX security vulnerability in Microsoft Office software to control users ' PCs by luring IE users to visit malicious websites. This is Microsoft in less than two months time announced the third 0 attack security vulnerabilities. This security vulnerability exists in the Office's Web Component ActiveX control.　　This control is used to display and publish forms, charts, and databases to the Web.　　This vulnerability affects software such as Office XP, Office 2003, Internet Security and Accelerator Server 2004 and 2006, and Office Sgt Business Accounting 2006. Security experts detail the manual approach to bypassing this security vulnerability. Users can also use Microsoft's Fix-it tool to automate the process of bypassing this security vulnerability.　　Microsoft said it was developing a security patch to fix the security breach. Antivirus software company Sophos says it has received many reports that some websites, mainly in China, offer this tool to exploit cyber security vulnerabilities.　　This tool downloads and runs a Windows executable file with the file name "Mal/generic-a" checked. Author: Tianhong