Secunia

Description

Microsoft has issued patches to fix a vulnerability in Microsoft Windows (Internet Explorer) allowing malicious HTML documents like web pages or emails to install arbitrary ActiveX controls.

The problem is that Microsoft Windows fails to present the user with an approval dialog under certain low memory conditions. When this occurs ActiveX controls will be installed silently. Malicious HTML documents may be able to cause low memory conditions.

This vulnerability can't be exploited on Microsoft Windows 2003 if Internet Explorer runs in Enhanced Security Configuration.

Solution
Microsoft has issued patches:
Further details available in Customer Area

Original Advisory
Vulnerability in Authenticode Verification Could Allow Remote Code Execution
http://www.microsoft.com/technet/security/bulletin/MS03-041.asp

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area