Business as usual...this time an Active X control that can be used to remotely execute code on a Windows machine. No patch available just a work around, this time from Microsoft, which seems to understand how critical this one is.
Find the workaround at: http://support.microsoft.com/kb/972890
1SSA - Security consulting, training and products: http://www.1ssa.net