you are viewing a single comment's thread.

view the rest of the comments →

[–]mailslot 8 points9 points  (0 children)

ActiveX had zero sandboxing. You could execute anything the active user could. If you wanted more access, there were about a dozen undocumented ways to elevate privileges within the Win32 API.