A vulnerability has been attacked by cybercriminals on the Microsoft Video ActiveX Control.