MS IE ADODB.Connection Vulnerability

A proof-of-concept code exploiting a vulnerability found in Microsoft IE ADODB.Connection is already published. This code tends to crash vulnerable versions of MS IE. However, there are speculations that remote code execution is possible and it is not long before malicious hackers discover it.

In this case, possible workaround includes disabling ActiveX control in IE, disabling the ADODB.Connection ActiveX control or only allowing ActiveX control in trusted zones.

Microsoft is aware of the said vulnerability and said that they are investigating the issue. For more information and workaround issues/guides, feel free to visit the links referred found in the references.

References: