A Microsoft ActiveX control allows a remote attacker to execute a malicious cabinet file via an attachment and an embedded script in an HTML mail, aka the "Active Setup Control" vulnerability.
Affected Platforms
Microsoft Outlook ExpressMicrosoft IeMicrosoft OutlookMicrosoft Internet Explorer