Secunia

A vulnerability has been reported in the Google Gadget ActiveX control, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to the ActiveX control using certain vulnerable Microsoft ATL templates and can be exploited to execute arbitrary code.

This may be related to:
SA35967

The vulnerability is reported in version 5.8. Other versions may also be affected.

Solution
Fixed in version 5.9, first available to Google Desktop users via automatic updates in August 2009.
Further details available in Customer Area

Provided and/or discovered by
Reported in a Microsoft security bulletin.

Original Advisory
Microsoft (MS10-008):
http://www.microsoft.com/technet/security/Bulletin/MS10-008.mspx

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area