Educause Security Discussion mailing list archives

ActiveX killbit vs IE Add-on Disable as protection from defective controls


From: Gary Flynn <flynngn () JMU EDU>
Date: Tue, 8 Jan 2008 13:05:19 -0500


Does anyone know if using the IE 'Manage Add-ons' functionality
to disable an ActiveX control is as effective at preventing an
exploit of a defective control as setting the kill bit? It sure
is a lot easier to explain to end users.

--
Gary Flynn
Security Engineer
James Madison University
www.jmu.edu/computing/security

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature


Current thread: