Acer has been called out for pre-loading a vulnerability on its notebooks.

A library file, called LunchApp.ocx, on the devices is set up to turn on the "safe for scripting" feature that means users are more vulnerable to ActiveX exploits. The "feature," designed to make it easier to browser Acer's site means systems can download potentially malicious Active X controls, without warning, if they happen to stray onto websites controlled by hackers.

This reduction in security defences was uncovered by security researchers at anti-virus firm F-Secure during testing of the LunchApp.ocx library, as explained here.

Acer is yet to respond to our requests for comment. ®

Related stories

• Acer draws sting from HP's patent fury (28 March 2007)
• CeBIT Acer sends mini PC into the living room (16 March 2007)
• Acer gears up for SMB server push (9 February 2007)
• Acer tries to drag up PC ASPs (7 February 2007)
• Forensics reaches into the future (27 December 2006)
• Yahoo! Messenger! in! security! flap! (18 December 2006)
• Letters Vista - hot or not? (30 November 2006)
• Attackers end-run around IE security (8 November 2006)
• 0-day bug shatters Windows (6 November 2006)