Secunia

Dennis Rand has reported a vulnerability in Cryptomathic Cenroll ActiveX Control, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to a boundary error in the "createPKCS10()" method. This can be exploited to cause a stack-based buffer overflow via an overly long string passed to the first argument of the method.

The vulnerability has been reported in version 1.1.0.0. Other versions may also be affected.

Solution
Apply patch.
Further details available in Customer Area

Provided and/or discovered by
Dennis Rand

Original Advisory
Cirt.dk:
http://cirt.dk/advisories/cirt-43-advisory.pdf

Deep Links
Links available in Customer Area