plan-s has discovered two vulnerabilities in NamoInstaller ActiveX Control, which can be exploited by malicious people to compromise a user's system.

1) The NamoInstaller.NamoInstall.1 ActiveX control (NamoInstaller.dll) includes the insecure "Install()" method, which can be exploited to e.g. download and execute a malicious program when a user is tricked into visiting a malicious website.

2) A boundary error in the NamoInstaller.NamoInstall.1 ActiveX control when handling arguments passed to the "Install()" method can be exploited to cause a stack-based buffer overflow by passing an overly-long string as argument to the affected method.

Vulnerability #1 is confirmed in NamoInstaller.dll versions 1.0.0.4, 2.0.0.1, and 3.0.0.1, and vulnerability #2 is confirmed in version 3.0.0.1. Other versions may also be affected.

Solution
Set the kill-bit for the affected ActiveX control.

Provided and/or discovered by
plan-s

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://www.milw0rm.com/exploits/4986
http://www.milw0rm.com/exploits/5045

Alternate/detailed remediation
Further details available in Customer Area

Deep Links
Links available to Secunia VIM customers