Security issues related to ActiveX controls

[Himalayan]

I am trying to send images via msn Windows live. I got a error for updating the Active X control. If I click on the upload button to send the message message nothing happens. There is no controls shown. I cannot do anything to send my pictures. I had already formatted my pc before 15 days due to virus issue. I formatted my pc and also had a regular updated for the virus database and even windows. I have done everything but still the same ask for update.

[Connect_Me]

It is right to say that ActiveX is not completely safe. There are certain vulnerabilities which has effected users in the past. There are certain disadvantages that can pose a major secure issue. Like any typical application gets the same rights as the Windows user need to executes it. This simply means that if you run an ActiveX control to a page with admin rights, it has full access to the system. In the case of ActiveX controls only information about the publisher are returned. The security mechanisms ActiveX controls to help reduce the risks but do not remove. Microsoft has provided certain update for that, this fix more of the issue of online security.

[Wguy2008]

The ActiveX controls is installed on your computer and the same can be reused at any time. The vulnerabilities becomes more serious if there is no update done in your system. This unupdated vulnerabilities can be used to install malware on the computer . So there are more chances of risk. And the vulnerabilities are then widespread due to the applications support and comes out regularly. Like I found some quiet a famous vulnerabilities. They are BitDefender Online Scanner ActiveX Control Code Execution Vulnerability, AOL Radio AMPX ActiveX Control Multiple Buffer Overflow Vulnerabilities, Kaspersky Online Scanner ActiveX Control Code Execution Vulnerability and RealPlayer ActiveX Playlist Handling IERPCtl Buffer Overflow Vulnerability. So do not take the same lightly.

[Pabloa]

I have some better practices that can help you to deal with this issue. Better install only needed and trusted applications. Avoid unsigned ActiveX controls, configure Internet Explorer to reject the installation of unsigned ActiveX. This is the best thing you can try to avoid any attack on your system. Then the other thing is that do not allow ActiveX controls of an unidentified publisher. This the most common thing peopel ignore and get caught in the issue. It is recommended that you must accept the ActiveX controls of only known sites and which are safe. That means the site where you can scan or like a bank site.

[Paisley007]

I too had something which on the same topic I would like to share. That is related to the same Active X issue of your system. Sometime in your browser there are automatic active x settings. You must not accept the same. The same thing directly offers ActiveX setup. So before accepting the setup think carefully about the risk, read the documents and then only install it. Deny ActiveX controls from sites online gambling sites. Update Active X already and do nt just re-update the same again and again. Multiple installation created more possibilities of threats. Try to use a better internet security software that can also support web filter. This can help you to stay away from such infected websites.

[Carley]

Last month I had faced a similar issue. Once when I run Internet Explorer, I go the update for the same. Then after entering in the Security tab via Tools > Folder Option > Custom Level the popup is not on the screen for sometime. My settings where that I had checked on the Enable ActiveX controls in the area of ActiveX controls and plugins. If you are facing the update error then it means that your your current security settings constitute a risk to your computer. Even if you upload a photo you will face the issue. There you will need to restore your security settings. I do not know how to fix the problem permanently. One thing is sure, you have to play with ActiveX settings Custom Level.