A vulnerability has been identified in Microsoft Windows, which could be exploited by remote attackers to compromise a vulnerable system. This issue is caused by a memory corruption error in the Microsoft Data Analyzer ActiveX control (max3activex.dll) when used in Internet Explorer, which could be exploited by attackers to execute arbitrary code by tricking a user into visiting a specially crafted web page.
This security update also includes kill bits for four third-party ActiveX controls.
