Secunia

A vulnerability has been reported in First4Internet XCP's uninstallation ActiveX control, which potentially can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to the "CodeSupport.ocx" ActiveX control that is installed via Internet Explorer when the user un-installs the XCP DRM software by visiting the vendor's website. The ActiveX control is marked safe-for-scripting and supports several potentially dangerous methods like "RebootMachine", "InstallUpdate", and "IsAdministrator". This may be exploited to install arbitrary code on the user's system.

Successful exploitation requires that the user visits a malicious website.

The vulnerability is related to:
SA17408

Solution
Remove the ActiveX control from the system if it is installed.

Provided and/or discovered by
Muzzy, J. Alex Halderman, and Ed Felten.

Changelog
Further details available in Customer Area

Original Advisory
http://www.freedom-to-tinker.com/?p=927
http://hack.fi/~muzzy/sony-drm/

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area