Secunia

Some vulnerabilities have been reported in various SupportSoft ActiveX controls, which can be exploited by malicious people to compromise a user's system.

The vulnerabilities are caused due to boundary errors within the SmartIssue, RemoteAssist, and Probe ActiveX controls. These can be exploited to cause stack-based buffer overflows via overly long arguments passed to various methods.

Successful exploitation allows execution of arbitrary code but requires that the user is e.g. tricked into visiting a malicious web site.

The vulnerabilities reportedly affect versions 5.5, 5.6, and 6.x.

Solution
Apply updates.
Further details available in Customer Area

Provided and/or discovered by
Independently discovered by:
* Mark Litchfield, NGSSoftware
* Peter Vreugdenhil, reported via iDefense Labs
* Will Dormann, CERT/CC

Original Advisory
SupportSoft:
http://www.supportsoft.com/support/Security%20Advisory%202006-01-V2007.pdf

US-CERT VU#441785:
http://www.kb.cert.org/vuls/id/441785

iDefense Labs:
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=478

Deep Links
Links available in Customer Area