Windows Messenger Activex Control
A remote code execution issue exists in the Microsoft Windows Messenger ActiveX Control, allowing attackers to execute arbitrary code by constructing a specially crafted Web page. When a user views the Web page, the issue could allow remote code execution, potentially giving the attacker the same user rights as the logged-on user.