« Adobe Acrobat Security Alert | Main | Srv.SSA-KeyLogger »

Friday, August 19, 2005

Msdds.dll + Active-x = Bad

A file that does not normally ship with Windows but that is included with downloaded applications such as the .NET framework has the potential to to be used maliciously. Details on the file, Msdds.dll, can be found at Secunia and Microsoft. Run a search on your Windows PC and determine if you have the file - if not, you're safe. If you do have it then keep your eyes open for a patch from Microsoft in the near future. Until then keep an even closer eye on mysterious sites asking you to OK the running of Active-x scripts. Remember, the added functionality of Active-x is compromised by its lack of security so limit your Active-x controls to known safe sites if possible.