A bug in DirectX, used by older versions of Windows, is being exploited to remotely execute code on machines. DirectX allows videos on web sites to play automatically.