Will Dormann has reported some vulnerabilities in the Broderbund Expressit 3DGreetings Player ActiveX control, which potentially can be exploited by malicious people to compromise a user's system.

The vulnerabilities are caused due to unspecified boundary errors, which can be exploited to cause buffer overflows.

Successful exploitation may allow execution of arbitrary code, but requires e.g. that a user is tricked into viewing a malicious web page.

Solution
Set the kill-bit for the affected ActiveX control.

Provided and/or discovered by
Will Dormann, CERT/CC.

Original Advisory
US-CERT VU#574401:
http://www.kb.cert.org/vuls/id/574401

Alternate/detailed remediation
Further details available in Customer Area

Deep Links
Links available to Secunia VIM customers