A vulnerability has been reported in the NOS Microsystems getPlus ActiveX control, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to an unspecified error within gp.ocx when processing installation files. This can be exploited to cause a stack-based buffer overflow by e.g. tricking a user into visiting a malicious website.

Successful exploitation allows the execution of arbitrary code, but may require that the attacker can place files on the domain or subdomain of a product using the download manager.

The vulnerability is reported in gp.ocx version 1.2.2.50. Other versions may also be affected.

Solution
The vulnerability is fixed by the vendor via APSB08-19 patches.

Provided and/or discovered by
Peter Vreugdenhil, reported via iDefense.

Changelog
Further details available to Secunia VIM customers

Original Advisory
iDefense Labs:
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=754

Adobe (APSB08-19):
http://www.adobe.com/support/security/bulletins/apsb08-19.html

Alternate/detailed remediation
Further details available in Customer Area

Deep Links
Links available to Secunia VIM customers