Secunia

Will Dormann has reported some vulnerabilities in BackWeb Lite Install Runner ActiveX Control, which can be exploited by malicious people to compromise a user's system.

The vulnerabilities are caused due to boundary errors in the BackWeb Lite Install Runner ActiveX control (LiteInstActivator.dll) when handling certain unspecified methods. These can be exploited to cause stack-based buffer overflows when a user e.g. is tricked into visiting a malicious website.

Successful exploitation allows execution of arbitrary code.

The vulnerabilities reportedly affects versions prior to 8.1.1.87.

Solution
Update to version 8.1.1.87.
Further details available in Customer Area

Provided and/or discovered by
Will Dormann, CERT/CC

Original Advisory
BackWeb:
http://backweb.com/news_events/press_releases/051608.php

US-CERT VU#216153:
http://www.kb.cert.org/vuls/id/216153

Other references
Further details available in Customer Area

Alternate/detailed remediation
Further details available in Customer Area

Deep Links
Links available in Customer Area