Secunia

A vulnerability has been reported in Microsoft Windows, which can be exploited by malicious people to bypass certain security restrictions and compromise a user's system.

The vulnerability is caused due to multiple ActiveX controls using the "OleLoadFromStream()" ATL function in an unsafe manner.

This is related to vulnerability #2 in:
SA35967

Successful exploitation allows execution of arbitrary code.

NOTE: This vulnerability is reportedly being actively exploited.

Solution
Apply patches.
Further details available in Customer Area

Provided and/or discovered by
Reported by the vendor.

Original Advisory
Microsoft (KB973525):
http://www.microsoft.com/technet/security/bulletin/ms09-055.mspx

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area