Secunia

A vulnerability has been reported in Chinagames iGame 2009, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to a boundary error in the bundled CGAgent ActiveX control (CGAgent.dll). This can be exploited to cause a stack-based buffer overflow by passing an overly long argument to the "CreateChinagames()" method.

Successful exploitation allows execution of arbitrary code.

Solution
Update to Chinagames iGame 2009.2.2.2.

Provided and/or discovered by
bugvuln and niklen

Changelog
Further details available in Customer Area

Original Advisory
http://hi.baidu.com/wi4r/blog/item/8b1c06fb2e3de8819f514671.html

Deep Links
Links available in Customer Area