Gateway CWebLaunchCtl ActiveX Control Command Execution and Remote Buffer Overflow Vulnerability

Gateway CWebLaunchCtl ActiveX Control Command Execution and Remote Buffer Overflow Vulnerability

Gateway CWebLaunchCtl ActiveX control is prone to an arbitrary-command-execution vulnerability and a buffer-overflow vulnerability.

An attacker can exploit these issues to execute arbitrary local scripts and to execute remote code in the context of an application using the ActiveX control (typically Internet Explorer). Failed attacks will likely cause denial-of-service conditions.

These issues affect weblaunch.ocx 1.0.0.1 and weblaunch2.ocx, which provide the ActiveX control; other versions may also be affected.