Luigi Auriemma has discovered two vulnerabilities in NET-i viewer, which can be exploited by malicious people to compromise a user's system.

The vulnerabilities are caused due to a boundary error in the UMS_Ctrl and UMS_Ctrl_STW ActiveX controls when handling the "BackupToAvi()" method. This can be exploited to cause a stack-based buffer overflow via an overly long string passed via the "fname" parameter.

Successful exploitation allows execution of arbitrary code.

The vulnerabilities are confirmed in version 1.37.120316 within the following ActiveX controls:
* UMS_Ctrl ActiveX Control version 1.5.1.1.
* UMS_Ctrl_STW ActiveX Control version 2.0.1.0.

Solution
Set the kill-bit for the affected ActiveX controls.

Provided and/or discovered by
Luigi Auriemma

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://aluigi.altervista.org/adv/netiware_1-adv.txt

Alternate/detailed remediation
Further details available in Customer Area

Deep Links
Links available to Secunia VIM customers