|
Microsoft ActiveX Certificate Enrollment Control Certificate Destruction Vulnerability
A flaw has been discovered in the ActiveX control Certificate Enrollment Control. The flaw in Certificate Enrollment Control may allow maliciously designed HTML content to delete certificates on a vulnerable system. This control could delete all stored certificates on the system, including trusted root certificates, Encrypted File System (EFS) certificates, and email signing certificates. The loss of this data could result in a range of problems such as the inability to communicate via a cryptographically secure channel, or the inability to decrypt locally stored data. |
|
 Privacy Statement |
