source: https://www.securityfocus.com/bid/17852/info
Cryptomathic ActiveX control is prone to a buffer-overflow vulnerability. The software fails to perform sufficient bounds-checking of user-supplied input before copying it to an insufficiently sized memory buffer.
Invoking the object from a malicious website or HTML email may trigger the condition. If the vulnerability were successfully exploited, this would corrupt process memory, resulting in arbitrary code execution. Arbitrary code would be executed in the context of the client application.
CIRT.DK - Cryptomathic ActiveX Buffer Overflow
TDC Digital Signature ActiveX Buffer Overflow
(c)2006 by Dennis Rand - CIRT.DK
The following Proof-of-Concept will make Internet Explorer shutdown, if you are vulnerable.
