ActiveX is a framework for reusable software components that can be composed to provide application functionality. It was introduced by Microsoft in 1996 and is commonly used in Windows applications and allows components to be embedded in web pages. ActiveX controls can create distributed applications over the internet. They can provide more functionality than Java applets but only run on Internet Explorer and Windows. Malware has been spread using ActiveX controls installed from malicious websites.

1. ActiveX 49871013 黃逸德

2. ActiveX ActiveX is a framework for defining reusable software components in a programming language independent way. Software applications can then be composed from one or more of these components in order to provide their functionality. It was introduced in 1996 by Microsoft as a development of its Component Object Model (COM) and Object Linking and Embedding (OLE) technologies and is commonly used in its Windows operating system, although the technology itself is not tied to it.

3. ActiveX Many Microsoft Windows applications — including many of those from Microsoft itself, such as Internet Explorer , Microsoft Office , Microsoft Visual Studio , and Windows Media Player — use ActiveX controls to build their feature-set and also encapsulate their own functionality as ActiveX controls which can then be embedded into other applications. Internet Explorer also allows embedding ActiveX controls onto web pages .

4. ActiveX controls ActiveX controls — small program building blocks — can serve to create distributed applications that work over the Internet through web browsers. Examples include customized applications for gathering data, viewing certain kinds of files, and displaying animation. One can compare ActiveX controls in some sense to Java applets : programmers designed both of these mechanisms so that web browsers could download and execute them. However, they also differ:

5. ActiveX controls Java applets can run on nearly any platform, while ActiveX components officially operate only with Microsoft's Internet Explorer web browser and the Microsoft Windows operating system . [2] Programmers can grant to ActiveX controls a much higher level of control over Windows than Java applets ever achieve, making them more powerful but also potentially more dangerous.

6. ActiveX controls Malware , such as computer viruses and spyware , can be accidentally installed from malicious websites using ActiveX controls ( drive-by downloads ). Programmers can write ActiveX controls in any language that supports COM component development, including the following languages/environments: Common examples of ActiveX controls include command buttons , list boxes , dialog boxes , and the Internet Explorer browser.

7. History Faced with the complexity of OLE 2.0 and with poor support for COM in MFC , Microsoft rationalized the specifications to make them simpler, and rebranded the technology as ActiveX in 1996. [5] [6] Even after simplification, users still required controls to implement about six core interfaces. In response to this complexity, Microsoft produced wizards , ATL base classes, macros and C++ language extensions to make it simpler to write controls.

8. History Starting with Internet Explorer 3.0 (1996), Microsoft added support to host ActiveX controls within HTML content. If the browser encountered a page specifying an ActiveX control via an OBJECT tag , it would automatically download and install the control with little or no user intervention. This made the web "richer" but provoked objections (since such controls only ran on Windows) and security risks (especially given the lack of user intervention). Microsoft subsequently introduced security measures to make browsing including ActiveX safer [7]

9. History digital signing of installation packages ( Cabinet files and executables) controls must explicitly declare themselves safe for scripting increasingly stringent default security settings Internet Explorer maintains a blacklist of bad controls

10. ActiveX in non-IE applications It may not always be possible to use Internet Explorer to execute ActiveX content (e.g. on a WINE installation), nor may a user want to.