Secunia

Multiple vulnerabilities have been discovered in CSS Web Installer ActiveX control, which can be exploited by malicious people to compromise a user's system.

The vulnerabilities are caused due to boundary errors when parsing arguments to the "InstallProduct()", "InstallProduct1()", and "InstallProduct2()" methods. This can be exploited to cause heap-based and stack-based buffer overflows via overly long arguments.

Successful exploitation allows execution of arbitrary code.

The vulnerabilities are confirmed in version 1.4.0.20327 and at least one is also reported in version 1.4.9508.605. Other versions may also be affected.

Solution
Set the kill-bit for the ActiveX control.

Provided and/or discovered by
Nikolas Sotiriu

Additional information provided by Secunia Research.

Original Advisory
http://sotiriu.de/adv/NSOADV-2010-006.txt

Alternate/detailed remediation
Further details available in Customer Area

Deep Links
Links available in Customer Area