Greetings all,

This months' Microsoft patches included a hotfix which sets the killbit for a third party Active X control produced by BackWeb [1]. The name may not sound familiar, but this component is actually used in the Logitech Desktop Messenger.

If you are a user of Logitech products, it is possible that you have this vulnerable Active X control installed on your system. This issue is mitigated by the Microsoft patch [2], preferably download the new version of Logitech Desktop Messenger from the Logitec website [3].

Without going into too much detail, the kill bit is only a mitigation for inappropriate use of ActiveX and other COM controls. I recommend reading the Microsoft three part FAQ on kill bits. [4][5][6] If you are a software developer and need to request Microsoft to distribute a kill bit patch for you, you can email them a request.