IE has the ability to execute ActiveX. Other browsers do not have that native ability. IE has some controls on ActiveX, like trusted zones, etc... however that control structure has been compromised on many ocassions. You can download a plug-in to netscape browsers (mozilla also, I am not sure about opera) so that these browsers can also execute ActiveX, but if you do that, you will not also get a control to constrain the execution of ActiveX to trusted sites - it will execute all ActiveX without any controls.

Now that is a capability worth talking about.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/8998/27282#27282