IT Security Stack Exchange
IT Security Stack Exchange

Questions tagged [activex]

ActiveX is a client side engine in Internet Explorer.

ActiveX is a client side engine in Internet Explorer used for providing client side functionality in a website. It allows for the download (if necessary) and local execution of a piece of code (the ActiveX control). The control can be reused across multiple sites and can be embedded within the content of a webpage.

6 questions
6
votes
2 answers

Why is ActiveX said to be insecure?

I do not have experience with web development, but I have read that ActiveX should be abandoned because it is insecure, in favour of other scripting methods such as JavaScript. What exactly does ActiveX do, why is it considered insecure and how is…
user13267
  • 359
  • 6
  • 16
5
votes
1 answer

How much protection does the Kill-Bit provide for ActiveX controls?

I have some ActiveX controls that are not supposed to run in the browser but only in my particular Front-End. I know that by setting the Kill-Bit I disable their execution in Internet Explorer and MS Office applications. That is following the FAQ…
Phoenician-Eagle
  • 2,167
  • 16
  • 21
2
votes
2 answers

Internet Explorer - Advanced Properties for Trusted Root Certificates

If you go to IE -> Internet Options -> Content -> Certificates -> Trusted Root Certification Authorities. Now Click on some CA certificates and click on Advanced You can add properties to the certificate. What exactly is this for? Does this…
user93353
  • 1,982
  • 3
  • 19
  • 33
1
vote
2 answers

Possible to use CAPICOM to extract current SSL certificate?

I'd like to extract the current SSL certificate from the current browsing session, and read the properties. I'd like to do this at the Browser, for content that is delivered from the server. I'm not looking for a 3rd party tool. A likely…
makerofthings7
  • 50,090
  • 54
  • 250
  • 536
0
votes
2 answers

What browser plugins (ActiveX, or those for Chrome/Firefox/Safari etc) pose the most risk for your company?

I'm looking for a list of risky browser plugins that we should prevent their use on the desktop. It's probably safe to assume that old versions of Flash are on the list, but what versions? What other objects should we check for?
makerofthings7
  • 50,090
  • 54
  • 250
  • 536
-1
votes
2 answers

How secure are ActiveX based security plug-ins?

Sometimes I have to use web sites that use ActiveX security plug-ins. The websites say that these plug-ins 1. secure the authenticity of printable certificates 2. secure overall data sent back and forth 3. secure sensitive data like credit card…
Ascendant
  • 99
  • 1