Microsoft confirms hackers are exploiting an unpatched bug in Windows’ DirectShow, part of DirectX. Users running IE6 or IE7 on Windows XP and Windows Server 2003 are vulnerable to the drive-bys attacks. Vista and Server 2008 are not at risk, nor are people running IE8, Microsoft’s newest browser. Microsoft urges users to set 45 “kill bits” in the flawed ActiveX control that contains the vulnerability. The company says it will patch the bug, but won’t say whether that patch will be ready by July 14.”]
Source: https://www.csoonline.com/article/2124159/microsoft-confirms-attacks-against-ie6–ie7.html