Microsoft says : Active X - A Threat to Vista :(

Microsoft Corporations Windows Vista Operating System is far better protected from attack code than Windows XP is. However, in a report issued last week, the company said that its own ActiveX plug-in technology is a significant threat to Vista.

The latest of the company's twice-yearly security intelligence reports said that half of the top 10 browser-based attacks against Windows XP over the past six months exploited vulnerabilities in Microsoft's own software.

None of the top 10 attacks against Vista systems did so, the report said. Instead, most of those attacks targeted bugs in third-party Internet Explorer add-ins created using ActiveX controls.

George Stathakopoulos, general manager of Microsoft's product security and security engineering group, said the results show that the company has improved new-product security.

"Our security development processes do pay off," he said, though he acknowledged that "eco systemwide, we still have a problem."

Source : Computer World