News Article: Important Security Update
Microgaming has removed support for the FlashXControl Object ActiveX Control for all versions prior to and including 1.0.1.8. The new Flash Casino Helper Control replaces the FlashXControl and uses version numbers greater than 2.0.0.0.
This security bulletin has been issued in response to a published possible vulnerability in version 1.0.0.7 of the FlashXControl ActiveX Control. Version 1.0.0.7 was superseded by version 1.0.0.8 in the fourth quarter of 2004, which addressed this security vulnerability.
Microgaming is working with Microsoft to issue a killbit in a Cumulative Security Update of ActiveX Killbits ("Security Update") that, after installation, will disable the old FlashXControl ActiveX Control.
Microgaming anticipates that this Microsoft Security Update be installed on all system on which Microgaming software has been installed and that systems are patched at all times to remove any potential vulnerability to their systems.
At this time there are no known instances of abuse of the security vulnerability.
Technical Information:
FlashXControl Class ID = {D8089245-3211-40F6-819B-9E5E92CD61A2}.
Flash Casino Helper Control Class ID = {F7EDBBEA-1AD2-4EBF-AA07-D453CC29EE65}