For people who are only skimming that message, note that this is not limited to ActiveX. In fact, the mention of ActiveX in the message's subject is regarding an unrelated topic that Ormandy happened to reply to.

One of these day I'll have to buy an IDA license. I keep seeing amazing uses of that disassembler.