Microsoft warns of XP security flaw

REDMOND, Wash., July 7 (UPI) -- Microsoft has issued a security alert warning Windows XP and Windows Server 2003 users of a newly discovered security hole that can be exploited by hackers.

The software giant's alert concerns a security hole in the Internet Explorer's Microsoft Video ActiveX Control that can be used by hackers to install viruses or other software on the computers of victims who visit Web sites set up to exploit the vulnerability, The Washington Post reported Tuesday.

Microsoft said "limited, active attacks that exploit this vulnerability" have been been reported.

The company said it is working on a security patch for the vulnerability and recommended users disable the ActiveX feature in the meantime.

Vincent Weafer, vice president of Symantec Security Response, said the security flaw affects users running Internet Explorer 6 or 7, but the most recent release, Internet Explorer 8, does not contain the vulnerability.