VULHUB ™

The Microsoft File Transfer Manager (FTM) ActiveX control is used to allow beta test customers and others to download files from certain Microsoft sites. The ActiveX control is reported to contain a buffer overflow that could potentially allow for execution of arbitrary code. Since this ActiveX control is signed by Microsoft, it can be installed without any warnings on a system where the user has chosen to always trust content from Microsoft.

The Microsoft File Transfer Manager (FTM) ActiveX control is used to allow beta test customers and others to download files from certain Microsoft sites. The ActiveX control is reported to contain a buffer overflow that could potentially allow for execution of arbitrary code. Since this ActiveX control is signed by Microsoft, it can be installed without any warnings on a system where the user has chosen to always trust content from Microsoft.