IE Vulnerable to Execution of Arbitrary Code

A vulnerability has been discovered in Internet Explorer that can be usedto execute arbitrary code on an affected system. The vulnerability, locatedin the DirectAnimation ActiveX control, is caused by a memory corruptionerror when processing arguments that are passed to the KeyFrame() orSpline() functions. Successful exploitation could reportedly allow a remoteintruder to take complete control of the user's system. A working exploit iscirculating on the Internet. Microsoft is aware of the problem and isinvestigating the matter. The company said that it expects to release apatch in association with an upcoming Security Bulletin. In the meantime thecompany released an advisory, Vulnerability in the Microsoft DirectAnimation Path ActiveX Control Could Allow Remote Control Execution.