AxBan Signature List v. 4

Errata has updated the content on the AxBan bad ActiveX control list.

We added entries including the Yahoo Messenger and the Microsoft Access Snapshot Viewer ActiveX controls.

Users with AxBan 1.5 or later will not need to manually download these entries. It will be updated automatically on launch if your computer is connected to the internet.

AxBan 1.5

Errata Security has published the long-awaited AxBan 1.5 today.

This version has the auto-update feature that downloads the latest list of bad ActiveX Controls from an XML file on launch. It also has new usability features such as cut/paste and overview information.

Download the latest version to get these new features here.

Please send your feature requests or bug reports for this version to me at marisa@erratasec.com.

Thanks!

New AxBan feature...

By popular request, you can now unkillbit ActiveX controls!
New version here: http://portal.erratasec.com/axb/AxBan.exe

New AxBan: 1.0.0.4

Added checks for Creative Software AutoUpdate Engine, information here.

New version for Download is available here.

0day Flash vuln

http://www.securityfocus.com/bid/29386

Due to a 0day flaw in Flash I have added the Flash Player CLSID to AxBan. The new version is available here.

AxBan 1.0.0.2

New version of AxBan available here.
Added checks for IDAutomation, information here.

A new version with more features and bugfixes should be out June 15th, enjoy.

New Team Member at Errata Security

Hi Everyone,

I'm Marisa and I am the new product manager for Errata's ProtoDev line of products. If you have feature requests for Ferret/Hamster, LookingGlass, or AxBan you can contact me at marisa@erratasec.com.

I'll also be contributing to the blog from time to time about the latest ProtoDev news and updates. It's really great to be a part of the Errata team, and I look forward to hearing from you all!

-marisa

ActiveX is dangerous...

UPDATE: AxBan can be downloaded from here. Any questions or comments can be directed to talksec@portal.erratasec.com.


We all know ActiveX is dangerous. After watching Milw0rm and other sites continue to add easy to exploit ActiveX cpntrol PoCs like the HP Update problem, we at Errata decided to add a free ActiveX killbit program. We will be updating it as needed with new CLSIDs on an as needed basis. Here is a screenshot, expect the full version to be posted later today.