kill bit

A registry-based mechanism in Microsoft Windows that disables a specific COM/ActiveX control from being instantiated by Internet Explorer or other COM hosts. Each control is identi...

A registry-based mechanism in Microsoft Windows that disables a specific COM/ActiveX control from being instantiated by Internet Explorer or other COM hosts. Each control is identified by its CLSID; the kill bit is set in the registry at HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{CLSID}\Compatibility Flags with the value 0x00000400. Microsoft used the kill bit as the standard mitigation for ActiveX vulnerabilities throughout the 2000s, issuing dozens of cumulative kill bit updates via Windows Update.

References